Threats tagged 'ghsa-rc9g-38jr-hhrj'

Pega Infinity versions 23.1.0 through 25.1.3 contain a stored Cross-site Scripting (XSS) vulnerability in a user interface component. Exploitation requires a high privileged user with a developer role. The vulnerability allows improper neutralization of input during web page generation, potentially enabling script injection. The CVSS 4.0 base score is 4.6, indicating a medium severity level. No official patch or remediation guidance is currently available. There are no known exploits in the wild at this time.