pentester.land· Apr 22, 2024· by Maciej Piechota (@haqpl), Adam Simuntis (@adamsimuntis)🔍 CVE-2023-26465CVE-2023-26465 - Breaking Through XSS Filters in Pega PlatformOpen Original Article ↗📋 Copy Report☆ Save BookmarkTarget Program: PEGA🎯 Vulnerability: Cross-Site Scripting (XSS)💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.#Markdown XSS#CVE-2023-26465