Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business Project aka OFBiz 10.04.x before 10.04.05, 11.04.01, and possibly 09.04.x allow remote authenticated users to inject arbitrary web script or HTML via the 1 Screenlet.title or 2...

PT-2014-2429

Name of the Vulnerable Software and Affected Versions Apache Open For Business Project aka OFBiz versions 10.04.x through 10.04.04 Apache Open For Business Project aka OFBiz version 11.04.01 Apache Open For Business Project aka OFBiz versions 09.04.x and earlier Description The issue concerns...