PT-2015-6968

Name of the Vulnerable Software and Affected Versions WideImage version 11.02.19 Description A cross-site scripting XSS issue exists in the applyConvolution demo of WideImage, allowing remote attackers to inject arbitrary web script or HTML via the matrix parameter to "demo/index.php"...

CVE-2015-5519: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the applyConvolution demo in WideImage 11.02.19 allows remote attackers to inject arbitrary web script or HTML via the matrix parameter to demo/index.php...