CVE-2022-31403

> iTop - 3.0.1 - XSS
>
> ------------------------------------------
>
> [Affected Component]
> URL:   http://localhost/itop/pages/ajax.render.php
> Parameter:   params[attr_dashlet_id]
> URL encoded POST input params[attr_dashlet_id] was set to CUSTOM_WelcomeMenuPage_ID_row1_col0_10'"()&%<acx><ScRiPt >DFre(9740)</ScRiPt>
>
> ------------------------------------------
>
> [Attack Type]
> Local
>
> ------------------------------------------
>
> [Impact Code execution]
> true
>
> ------------------------------------------
>
> [Attack Vectors]
> Cross-site Scripting (XSS) refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application.
  XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates.