ID: 6516
Title: Fixed stored XSS using alert handler config
Component: alerts
Level: 1
Class: Security fix
Version: 1.6.0i1
A user with permission to the alert handler administration could use an alert rule to
store arbitrary javascript code which would then be executed in the context of the
browser
of another user with permission to the alert handler administration when viewing the list
of alert handlers.