⚠️Performance Pro v3.19.17 | Reflected Cross-Site Scripting (XSS) Disclosures

Discoverer: Paul Goodrich, ...

Summary of Findings

• Reflected XSS in Employee Notes

  • CVE-2025-#####

• Reflected XSS in Future Goals

  • CVE-2025-#####

• Reflected XSS in Current Goals

  • CVE-2025-#####

Timeline

• Reported to Vendor: March, 2025

• Patched: TBD

• Published: TBD