Avamost369

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A user with Editor permissions can create a dashboard where the TableNG panel includes a malicious field name. This leads to stored cross-site scripting (XSS), a vulnerability where a malicious script is permanently stored on the server and executed in the browser of any user who views the affected dashboard. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.