CVE-2016-6133: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ektron Content Management System before 9.1.0.184SP39.1.0.184.3.127 allows remote attackers to inject arbitrary web script or HTML via the rptStatus parameter in a Report action to WorkArea/SelectUserGroup.aspx...

PT-2017-8918

Name of the Vulnerable Software and Affected Versions Ektron Content Management System versions prior to 9.1.0.184SP39.1.0.184.3.127 Description The issue allows remote attackers to inject arbitrary web script or HTML via the rptStatus parameter in a Report action to...