Support Article
User can execute JavaScript in multiselect control to open popup
SA-86581
Summary
When the user launches a popup to add Followers for a case type using a multiselect control, the user is able to execute the below JavaScript; and the popup displays.
<script>alert(5)</script>
Error Messages
Not Applicable
Steps to Reproduce
- Click Manage link for a case type to add Followers for a work object.
- Enter the below script:
<script>alert(5)</script>
Root Cause
A defect in Pegasystems’ code or rules.
Resolution
Update to Pega Platform 8.2.3.
Published December 2, 2021
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.