Security Advisory

CVE-2021-28079

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-26 11:24:28
Last updated 2024-08-03 21:33:17
Assigner mitre
State PUBLISHED

Description

Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv (Jamovi) document containing a payload. When opened by victim, the payload is triggered.