Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506.

Published Dec 19, 2018 · Updated Aug 5, 2024 · Assigned by mitre