Threats tagged 'ghsa-8v73-g9w9-755p'

A stored cross-site scripting (XSS) vulnerability exists in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01. This flaw allows authenticated users to inject malicious scripts that execute in other users' browsers when they view the affected work-notes. The vulnerability has a medium severity rating with a CVSS score of 5.1. No patch or remediation details are currently provided.