Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.094
EPSS Ranking 92.3%