Launchpad.net

CVE 2020-8789

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration.

See the CVE page on Mitre.org for more details.