-
Defect (Security)
-
Resolution: Fixed
-
Major
-
4.0.0alpha1, 4.0.0alpha2, 4.0.0alpha3
-
Sprint 28, Sprint 29, Sprint 30, Sprint 31
-
0.125
There is a persistent xss in map navigation tree widget. To reproduce it, create a map navigation tree widget, add single element and set it's name to <img src="xxx" onerror="alert('xss');"/>. As a result you will get: