description: In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context.
problem types: CWE-79: Improper Neutralization of Input During Web Page Generation
affected:
{
product: Eclipse BIRT
vendor: The Eclipse Foundation
versions:
status: affected, version: 1.0 to 4.7
}