Name of the Vulnerable Software and Affected Versions:

Navegg Analytics versions n/a through 3.3.3

Description:

The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Stored XSS in Navegg Analytics.

Recommendations:

For versions n/a through 3.3.3, update to a version that contains a fix for this issue, as the current version is affected by the CSRF vulnerability that enables Stored XSS.