Description
foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Foreman | foreman | 1.16.0 | — |