Key Information Vulnerability Type Stored XSS Vulnerability Vulnerability Description When users add a notification announcement, they can insert XSS payloads without any restrictions. These payloads are stored in the database and output on display pages without any encoding, leading to a stored XSS vulnerability. Taint Source Taint Sink POC (Proof of Concept) Inject XSS Payload Trigger XSS Impact Impact of XSS Vulnerabilities