Description
An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arcadia Technology | Crafty Controller | 4.2.0 – < 4.11.0 | 4.11.0 |