Skip to content
OpenAdvisories

Product · Altium

Altium Live

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Stored Cross-Site Scripting in Altium Live Support Center Comment Endpoint

    A stored cross-site scripting (XSS) vulnerability exists in the Altium Support Center AddComment endpoint due to missing server-side input sanitization. Although the client interface applies HTML escaping, the backend accepts and stores arbitrary HTML and Jav…