A moderate priority Cross Site Scripting (XSS) vulnerability has been discovered in ArcGIS Enterprise Sites Builder version 10.8.1.
[#BUG-000135364 XSS in ArcGIS Enterprise Sites (iframe card) ]
This is a moderate priority issue with a CVSSv3: 5.4.
Article Discussion: