CVE-2017-2173

Cross-site scripting vulnerability in Empirical Project Monitor – eXtended all versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Date published : 2017-05-22

https://www.ipa.go.jp/sec/info/20170519.html

https://jvn.jp/en/jp/JVN85512750/index.html