PT-2015-6662

Name of the Vulnerable Software and Affected Versions Xceedium Xsuite versions 2.4.4.1 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the fileName parameter in the "ajax cmd.php" file. Recommendations For versions 2.4.4....