Threats tagged 'ghsa-m788-xh5w-fhrf'

A stored cross-site scripting (XSS) vulnerability exists in the DefterAsist Financial Advisor Platform due to improper neutralization of input during web page generation. This vulnerability allows attackers with limited privileges to inject malicious scripts that can be executed in the context of other users. The issue affects versions of the platform up to the date 2026-10-27. The vulnerability has a medium severity rating with a CVSS score of 5.4.