ServiceNow cross-site scripting | CVE-2022-39048

NAME__________ServiceNow cross-site scriptingPlatforms Affected:Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________ServiceNow is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the assessment_redirect ServiceNow UI page. A remote attacker could exploit…