Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.Referenceshttps://docs.jamf.com/10.28.0/jamf-pro/release-notes/Bug_Fixes_and_Enhancements.html