Solution : https://service.sap.com/sap/support/notes/1672440 (SAP Service marketplace login required)
Key words :
prerequisites bsp page/scrm_mkt_emailpml_previewpmled_editorpmlpu_plistwithin crm-mkt-ml, symptom crm-mkt-ml, crm-mkt-ml reason, sufficiently encode output parameters, cross-site scripting issue, terms cross-site scripting, modify displayed application content, potentially obtain authentication information, cross-site scripting, authentication information
Related Notes :
1582870 | ABAP XSS Escaping Support |
1582867 | Security options (XSS) for ESCAPE |