CVE-2012-2985: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the UploadID parameter...