Threats tagged 'ghsa-m795-4pj8-4r7f'

Tactical RMM has a stored cross-site scripting (XSS) vulnerability due to improper input validation or output encoding in multiple fields. This flaw allows attackers to inject malicious HTML or JavaScript into the application database, which executes in users' browsers when viewing affected content. Exploitation can lead to account takeover or arbitrary code execution in the context of the user session.