CVE-2013-6233

This advisory describes a persistent HTML script insertion vulnerability in SpagoBI, allowing an attacker to inject malicious forms into input fields like 'Description' in 'Short document metadata'. The vulnerability can be exploited to conduct phishing attacks by capturing user credentials when victims interact with the injected content.