⚠️Performance Pro v3.19.17 | Reflected Cross-Site Scripting (XSS) Disclosures

Discoverer: Paul Goodrich, ...

Summary of Findings

• Reflected XSS in Employee Notes

  • CVE-2025-60934

• Reflected XSS in Future Goals

  • CVE-2025-60933

• Reflected XSS in Current Goals

  • CVE-2025-60932

Timeline

• Reported to Vendor: March, 2025

• Patched: TBD

• Published: TBD