Threats tagged 'ghsa-v9hg-hv75-9825'

A stored cross-site scripting (XSS) vulnerability exists in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01. This flaw allows authenticated users to inject malicious scripts that execute in the browsers of other users. The vulnerability has a medium severity rating with a CVSS score of 5.1. No public exploits or patches are currently documented.