description: PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svg_file' parameter.
problem types: Stored cross-site scripting (XSS)
affected:
{
product: PeTeReport
vendor: n/a
versions:
status: affected, version: 0.5
}