description: In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability exists which could allow injection of malicious scripts.
problem types: Cross Site Scripting
affected:
{
product: U.motion Builder
vendor: Schneider Electric SE
versions:
status: affected, version: U.motion Builder, all versions prior to 1.3.4
}