CVE-2023-1298 (published 2023-07-06T17:13:27.552Z)
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts.

Affected products: Vendor: ServiceNow
Product: Now User Experience
Versions: 0, 0, 0, 0