2 matches found
CVE-2016-6201
Cross-site scripting XSS vulnerability in Ektron Content Management System CMS before 9.1.0.184 SP3 9.1.0.184.3.127 allows remote attackers to inject arbitrary web script or HTML via the ContType parameter in a ViewContentByCategory action to WorkArea/content.aspx...
6.1CVSS5.9AI score0.00888EPSS
SaveExploits2References1
CVE-2016-6201: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Ektron Content Management System CMS before 9.1.0.184 SP3 9.1.0.184.3.127 allows remote attackers to inject arbitrary web script or HTML via the ContType parameter in a ViewContentByCategory action to WorkArea/content.aspx...
6.1CVSS6.4AI score0.00888EPSS
SaveExploits2References2
20