CVE-2022-42704 Information

Description

A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebec Rome and San Diego allows remote attackers to inject arbitrary web script via the Standard Ticket Conversations widget.

Reference

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1216141