CVE-2022-25220

Name of the Vulnerable Software and Affected Versions PeteReport version 0.5

Description The issue allows an authenticated admin user to inject persistent JavaScript code inside markdown descriptions when creating a product, report, or finding.

Recommendations For PeteReport version 0.5, consider disabling the markdown description feature for product, report, or finding creation until a patch is available to prevent JavaScript code injection. Restrict access to the creation of products, reports, or findings to minimize the risk of exploitation.