CVE-2024-4867 — The WSO2 API Manager developer portal accepts user-supplied input without enforcing expected validation constraints or proper output encoding. This deficiency allows a malicious actor to inject script — CVE Database · The Intelligence Room