CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.

Score

CVSS 3.1 8.9 High

Status

Modified - cve@mitre.org

Published

2020-04-29

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Platform (Pega)

References

• https://community.pega.com/knowledgebase/products/platform/resolved-issues?q=issue%20529706&f%5B0%5D=version%3A32536
• https://www.pega.com/products/pega-platform