Versiant LYNX Customer Service Portal (CSP) version 3.5.2 is vulnerable to stored cross-site scripting which could allow a local authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects session cookie hijacking or information disclosure.