# Stored XSS in object titles[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2021-002.html#stored-xss-in-object-titles "Permalink to this headline")

## Information[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2021-002.html#information "Permalink to this headline")

* Advisory ID: DSA-2021-002

* CVSS Base Score: 8.8

* Severity: High

* CWE classification: CWE-79

## Summary[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2021-002.html#summary "Permalink to this headline")

In Dataiku DSS before 9.0.4, insufficient input sanitization could lead to a stored XSS in the “title” fields of projects and other Dataiku objects.

## Affected Products[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2021-002.html#affected-products "Permalink to this headline")

Dataiku DSS in versions before 9.0.4

## Mitigation[¶](https://doc.dataiku.com/dss/latest/security/advisories/dsa-2021-002.html#mitigation "Permalink to this headline")

Dataiku DSS 9.0.4 has been made available to customers to remediate this issue
