JVN#92651529 Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting

Nucleus is an open source content management system provided by The Nucleus Group. Nucleus EUC-JP Japanese Edition contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the specific web browser.

Solution

Update the Software
Apply the latest update provided by the developer.

Products Affected

• Nucleus v3.31 SP1 EUC-JP Japanese Edition and earlier
  According to the developer, it is confirmed that this vulnerability exist in Nucleus EUC-JP only, and Nucleus UTF-8 Japanese Edition and Nucleus English Edition are not affected.
  For more information, refer to the developer’s website.