5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.5%
Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter.
holisticinfosec.org/content/view/95/45/
secunia.com/advisories/33296
www.osvdb.org/51028
www.securityfocus.com/bid/33063
exchange.xforce.ibmcloud.com/vulnerabilities/47692