ZSA-2022-03

Date: 2022-04-20
Affected: All versions of Znuny LTS <= 6.0.40, Znuny <= 6.3.1, ((OTRS)) Community Edition <= 6.0.30
Severity: medium
CVE: pending

Some strings can accept malicious JavaScript (where HTML is allowed). The code is executable in the package manager.