CVE-2016-1451

Cisco Meeting Server (formerly Acano Conferencing Server) is affected by a cross-site scripting (XSS) vulnerability in its web-based management interface for version 1.7 through 1.9 (Bug ID CSCva19922). The root cause is improper input validation of certain HTTP parameters, enabling an attacker t...