Product
A stored cross-site scripting vulnerability in the SNS Enrollment Portal allows an unauthenticated attacker to inject malicious scripts during the certificate request process, which execute when an administrator validates the request.