EMLsoft Cross-Site Scripting Vulnerability

EMLsoft is an enterprise address book management system. A cross-site scripting vulnerability exists in EMLsoft version 5.4.5, which can be exploited by remote attackers to inject arbitrary Web script or HTML via the eml/upload/eml/?action=address&do=edit page...

CVE-2018-14964

An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page...