XSS in Ping Identity Pingfederate

CVE-2024-25573

Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (24.7th percentile) — read the EPSS interpretation.