Description
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182.
Remediation
References
Related Vulnerabilities
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17303)
WordPress Plugin Zendesk Chat Cross-Site Request Forgery (1.4.5)
MySQL CVE-2017-3635 Vulnerability (CVE-2017-3635)
Joomla! Core Security Bypass (2.5.0 - 3.9.16)
Zikula Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-4729)