TI-2019-07323 CVE-2019-9957 · GHSA-fg88-6r3w-mcpxStored XSS within Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers…Priority LOW 26Stored XSS within Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages.CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00806 · Published 2019-06-24 · No fix listed CWE-79