CVE-2018-1921

IBM Campaign (versions 9.1.0–11.0) is reported vulnerable to Cross-Site Scripting in the Web UI, enabling injection of arbitrary JavaScript that could lead to credential disclosure within a trusted session. The CVE notes an XSS issue; exploitation details are not provided in the primary sources. ...