A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment.
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.00936·Published 2020-07-23·Fixed in 4.0CWE-79