Edr4

The issue is related to Cross-site Scripting (XSS) - Stored. This means that an attacker can inject malicious scripts into the application, which are then stored and executed by the application, potentially allowing the attacker to steal user data or take control of user sessions.

The issue concerns cross-site scripting via malicious RSS feeds. An administrator can import a malicious RSS feed containing Cross Site Scripting (XSS) payloads inside RSS links. When victims visit the RSS content and click on the link, they will execute the Javascript.

O problema está relacionado à falta de neutralização de tags HTML durante a geração de páginas da web, o que pode permitir que um invasor remoto realize um ataque de script entre sites (XSS). As versões afetadas não neutralizam adequadamente as tags HTML no contexto da pesquisa global.