CVE-2021-21447

https://notcve.org/view.php?id=CVE-2021-21447

12 Jan 2021 — SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored Cross-Site Scripting. La plataforma SAP BusinessObjects Business Intelligence, versiones 410, 420, permite a un atacante autenticado inyectar una carga útil de JavaScript maliciosa en el campo de entrada de valor perso... • https://launchpad.support.sap.com/#/notes/2965154 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •