2. Stored XSS in AgileReporter (Oracle) 21.3 by VERMEG

Note: Stored XSS (Only admin user is able to injects the payload).
 
How to reproduce:

1. Click Settings --> Administration --> Product Update
2. Click on Set Broadcast Message
3. Paste the following payload to the Message field:
    <IMG SRC= / onerror=alert(String.fromCharCode(49))>
4. Set a Start and End time and click save.
5. The payload will trigger in every page refresh.