Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the CMS page history comparison view. An attacker can execute arbitrary script in the browser of CMS users by inserting malicious HTML into page text fields and subsequently viewing the page history in compa...