Supra CSV <= 4.0.3 - Stored Cross-Site Scripting via CSRF

Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application.