Partner Software Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Partner Software's Partner Software application and Partner Web application, both in version 4.32.2. The issue allows authenticated users to add notes on the 'Notes' page while viewing a job. However, the input is not properly sanitized, enabling the inclusion of HTML tags and JavaScript. This flaw could be exploited by an attacker to insert a note containing malicious JavaScript, which would be executed when the note is viewed.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the notes.