XSS problem in Dynamic Date Lists.

• Type: Regression Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 6.1.0 CE RC1
• Fix Version/s: --Sprint 12/11, 6.1.0 CE RC1
• Component/s: Dynamic Data Lists
• Labels:
  • QA-R
• Environment: Tomcat 7.0.21 + MySQL 5.5. 6.1.x Revision 88367.
• Similar Issues: Show 3 results ; ;

  LPS-31778	XSS vulnerability in Dynamic Data Lists
  LPS-27763	Date type fileds in Dynamic Data Lists are not localized
  LPS-25829	Dynamic Data Lists: Localization UI problem

1. Go to Control Panel&Dynamic Date Lists.
2. Add a new List or Data Definition with malicious Name and Description and like "<script>alert("xss")</script>".