CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross‑Site Scripting (XSS) vulnerability in the Comments tab. Root cause noted in CNVD as lack of proper validation of client‑side data in the WEB application, enabling execution of client‑side code. Affected product is Pegasystem Pega Pl...

CVE-2020-8773

The CVE-2020-8773 entry affects Pegasystem’s Pega Platform Richtext Editor prior to version 8.2.6, with a Stored Cross-Site Scripting (XSS) vulnerability. The CNVD entry attributes the issue to a lack of proper client-side data validation, and Red Hat/CNVD/NVD references confirm the same flaw. CV...