< 10.4
10.4
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.