CVE-2022-25220

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creating a product, report or finding.

Date published : 2022-03-03

https://fluidattacks.com/advisories/armstrong/

https://github.com/1modm/petereport/issues/35