Solution : https://service.sap.com/sap/support/notes/1676846 (SAP Service marketplace login required)
Key words :
symptom application component crm-md-pro, prerequisites bsp pages crm_product_getlist/showdetail, application component crm-md-pro, crm-md-pro reason, modify displayed application content, sufficiently encode output parameters, cross-site scripting issue, terms cross-site scripting, potentially obtain authefication information, cross-site scripting
Related Notes :
1582870 | ABAP XSS Escaping Support |
1582867 | Security options (XSS) for ESCAPE |