Vigilance.fr - Action Pack: Cross Site Scripting via content_security_policy, analyzed on 18/03/2025
May 2025 by Vigilance.fr
An attacker can trigger a Cross Site Scripting of Action Pack, via content_security_policy, in order to run JavaScript code in the context of the web site.
Plus d'information sur : https://vigilance.fr/vulnerability/Action-Pack-Cross-Site-Scripting-via-content-security-policy-46614