| Package | Affected versions | Patched versions |
|---|---|---|
| miles rich internet application | = 2020.2 |
Sofico Miles RIA 2020.2 Build 127964T is affected by Stored Cross Site Scripting (XSS). An attacker with access to a user account of the RIA IT or the Fleet role can create a crafted work order in the damage reports section (or change existing work orders). The XSS payload is in the work order number.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free