A cross-site scripting vulnerability is present in Red Hat Advanced Cluster Security (RHACS) portal.
When rendering a table-view in the portal, (e.g. on any of the endpoints /main/configmanagement/*), the front-end generates a DOM table-element (id="pdf-table"). This is then populated with _unsanitized_ data using innerHTML. Since an attacker has some control over the data rendered, this makes it vulnerable to an XSS-attack.