SAP Note 1676846 - Unauthorized modification of BSP in CRM-MD-PRO

Component : Products -

Solution : https://service.sap.com/sap/support/notes/1676846 (SAP Service marketplace login required)

Key words :
symptom application component crm-md-pro, prerequisites bsp pages crm_product_getlist/showdetail, application component crm-md-pro, crm-md-pro reason, modify displayed application content, sufficiently encode output parameters, cross-site scripting issue, terms cross-site scripting, potentially obtain authefication information, cross-site scripting

Related Notes :

1582870ABAP XSS Escaping Support
1582867Security options (XSS) for ESCAPE