Description HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report. References https://www.hrworks.de/kategorie/news/flow/ https://gist.github.com/svennergr/204038bda1849ebce9af32eea9e55038