Support Article
Browser pop-up with JS code output displays on entering JS code
SA-75946
Summary
A browser pop-up displays with an output of Java Script (JS) code on entering a JS code in the Multi-select control to add followers to a case type.
Error Messages
Not Applicable
Steps to Reproduce
- Click Manage link on a case type to add followers to the work object
- Enter the below script in the Multi-select control and click the Enter key:
<script>alert(5)</script>
Root Cause
A defect in Pegasystems’ code or rules. Cross-Site Scripting (XSS) issue with the Multi-select control.
Resolution
Apply HFix-51943.
Published April 2, 2019 - Updated December 2, 2021
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.