Threats tagged 'ghsa-f796-cqvh-43q8'

A stored cross-site scripting (XSS) vulnerability exists in the Autodesk Fusion desktop application due to a maliciously crafted HTML payload embedded in the description of an electronic library (.lbr) file. When such a library is imported and its description displayed in the Library Manager, the payload can execute arbitrary code or read local files within the context of the application process. This vulnerability has a high severity rating with a CVSS score of 7.1.