Threats tagged 'ghsa-7976-9cfm-3xmg'

A reflected cross-site scripting (XSS) vulnerability exists in the SmartIT inline-image attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01. This flaw allows authenticated users to inject malicious script content into HTML responses that are then viewed by other users, potentially leading to script execution in their browsers.