Threats tagged 'ghsa-frxx-4wv8-gw23'

Partner Software's Partner Software and Partner Web applications contain a stored cross-site scripting (XSS) vulnerability. An authenticated user can add notes containing HTML and JavaScript on the 'Notes' page without proper input sanitization. This allows malicious JavaScript to be stored and executed in the context of other users viewing the notes, potentially leading to session hijacking or other client-side impacts.