Description
Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality is low and Integrity is none.
Remediation
References
Related Vulnerabilities
WordPress Plugin Login or Logout Menu Item Security Bypass (1.1.1)
WordPress Plugin 1 Flash Gallery Cross-Site Scripting and SQL Injection Vulnerabilities (0.2.5)
MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-4629)
WordPress Plugin Custom Search by BestWebSoft Cross-Site Scripting (1.35)