PT-2015-5351

Name of the Vulnerable Software and Affected Versions Saurus CMS version 4.7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via the search parameter to "admin/user management.php...