Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution.

Published Dec 21, 2020 · Updated Aug 4, 2024 · Assigned by mitre