2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in codeeditor.php in ocPortal before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 line parameters...
4.3CVSS6AI score0.01682EPSS
SaveExploits2References3Affected Software1
CVE-2012-1470: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in codeeditor.php in ocPortal before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 line parameters...
4.3CVSS5.9AI score0.01682EPSS
SaveExploits2References2
20