Description
In Progress Telerik UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink elements.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | Telerik UI for WinUI | 2.0.0 – < 3.0.0 | 3.0.0 |