CVE-2021-44217

Ericsson CodeChecker up to version 6.18.0 contains a stored XSS in the comments component of the reports viewer, exploitable via POST JSON data to the /CodeCheckerService API. This allows remote attackers to inject arbitrary web script or HTML. Related advisories indicate a fix was issued in or a...