Description
Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elevated privileges
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CervantesSec | cervantes | alpha 0.3 – ≤ 1.3-beta | v.1.4.0-beta |