Description (CNA)
Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only be modified by an authenticated administrative user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Pegasystems / Pega Platform | affected 7.1 before 8.8.4 |
CWE
CWE-74
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.