Rapid7 Nexpose Create Tags Page Cross-Site Scripting Vulnerability

Rapid7 Nexpose is a suite of vulnerability management software from Rapid7 USA that can synthesize different scans to deeply probe a network. The software proactively scans configuration environments for errors, vulnerabilities, malware and provides guidance to reduce risk. A cross-site scripting...

PT-2016-7817

Name of the Vulnerable Software and Affected Versions Rapid7 Nexpose version 6.4.12 Description The issue allows any authenticated user with the capability to create tags to inject cross-site scripting XSS elements in the tag name field on the Create Tags page. When this tag is viewed in the Tag...