Description
A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application. This vulnerability could allow an attacker to store a JavaScript payload within the editable ‘name’ and ‘icon’ parameters of the Activities functionality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Holded | Holded | all versions | — |