CVE-2020-8789

Name of the Vulnerable Software and Affected Versions Composr version 10.0.30

Description The issue allows for Persistent XSS via a Usergroup name under the Security configuration. This can be exploited to execute malicious scripts on the affected system.

Recommendations For Composr version 10.0.30, update to a version that fixes this issue to prevent exploitation. As a temporary workaround, consider restricting access to the Security configuration to minimize the risk of exploitation. Avoid using user-inputted data for Usergroup names until the issue is resolved.