Threats tagged 'ghsa-425v-fpc7-7pw2'

A Cross-Site Scripting (XSS) vulnerability exists in the Chat component of Progress Software's Kendo UI for Angular versions prior to 25.3.0. This flaw allows a low-privileged attacker who can supply chat messages to execute arbitrary JavaScript in another user's browser when the user clicks an unsafe URL in an openUrl quick action.