CVE-2015-9317

The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...

satellite: XSS flaw in custom system information key handling

Cross-site scripting XSS vulnerability in the web interface in Red Hat Network RHN Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page...