mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-07 11:06:19 +00:00
697 B
697 B
CVE-2020-28408
Description
The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard.
POC
Reference
- https://mattschmidt.net/2020/11/10/dundas-persistent-xss/
- https://mattschmidt.net/2020/11/10/dundas-persistent-xss/