PT-2012-5054

Name of the Vulnerable Software and Affected Versions Open Constructor version 3.12.0 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the header parameter in the /data/hybrid/i hybrid.php endpoint. Recommendations...