Ideagen DevonWay Stored Cross-Site Scripting Vulnerability in Reports Page

A stored cross-site scripting vulnerability has been identified in Ideagen DevonWay. This issue allows remote, authenticated attackers to inject payloads on the 'Reports' page, which are executed when other users view the report. The vulnerability affects versions prior to 2.62.4, with 2.62.4 and 2.62 LTS being unaffected.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the report.

Remediation

Users can upgrade to Ideagen DevonWay versions 2.62.4 or 2.62 LTS to address this vulnerability.