CVE-2018-19596

Zurmo 3.2.4 allows HTML Injection via an admin’s use of HTML in the report section, a related issue to CVE-2018-19506.

Source: CVE-2018-19596