Security vulnerability XSS

Development
1

I’m submitting a critical security vulnerability

  • [ ] Regression (a behavior that stopped working in a new release)
  • [X ] Bug report
  • [ ] Performance issue
  • [ ] Documentation issue or request

Current behavior

Performing security tests to SquidEx our security team detect a critical securituy issu related to XSS vulnerability. I already saw reported the same issue here in the forum (4749)

Environment

  • [X ] Self hosted with docker
  • [ ] Self hosted with IIS
  • [ ] Self hosted with other version
  • [ ] Cloud version

Version: 7.1.0

Browser:

  • [ ] Chrome (desktop)
  • [ ] Chrome (Android)
  • [ ] Chrome (iOS)
  • [ ] Firefox
  • [ ] Safari (desktop)
  • [ ] Safari (iOS)
  • [ ] IE
  • [ ] Edge
2

Hi,

can you just report them over huntr.dev? Or write me a PM here.