CVE-2020-9012
A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.
Date published : 2020-02-16
https://support.gluu.org/other/7992/reflected-cross-site-scripting-on-import-people/