# Security Updates - CVE-2022-24703

## CVE-2022-24703

### There was a stored XSS vulnerability in the Schedule name field of Schedule page.

## Vulnerability Details

| Field | Details |
|---|---|
| Severity | Medium |
| Reported | 22 January 2022 |
| Reported by | Hazem Osama |
| Fixed | 1 February 2022 |
| Affected Builds | Builds below 125583 |
| Fixed in | Build 125584 |
| Overview | There was a stored XSS vulnerability in the Schedule name field of the Schedule page |
| Recommended Fix | For builds below 125583, please contact [our support team.](mailto:opmanager-support@manageengine.com) |

## Description

Earlier, there was a stored XSS vulnerability in the Schedule name field of Schedule page. This issue is fixed now.

We recommend you to contact our support team at [opmanager-support@manageengine.com](mailto:opmanager-support@manageengine.com) to fix this issue.

## Source and Acknowledgements

Find out more about CVE-2022-24703 from the [CVE dictionary](https://nvd.nist.gov/vuln/detail/CVE-2022-24703).

## Need Help?

For clarification or corrections please contact our [support team](https://www.manageengine.com/network-monitoring/support.html) or email us at [itom-upgrades@manageengine.com](mailto:itom-upgrades@manageengine.com).