medium5.4
CVE-2018-20663
The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the "Reports > Reports" name field.
Impact
The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the "Reports > Reports" name field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Haulmont | Cuba Platform | through 6.10.7 |
| Haulmont | Reporting | through 2019-01-02 |