CVE-2023-30959 — Stored XSS via javascript URI in Apollo Change Requests comment
In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.
Published: 2023-09-26 · CVSS: 4.1 · CVSS 3.1
In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7