CVE-2016-6201: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ektron Content Management System CMS before 9.1.0.184 SP3 9.1.0.184.3.127 allows remote attackers to inject arbitrary web script or HTML via the ContType parameter in a ViewContentByCategory action to WorkArea/content.aspx...

CVE-2014-2729

Cross-site scripting XSS vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option...

CVE-2014-2729

This CVE targets Ektron CMS 8.7 (before 8.7.0.055). A stored XSS flaw exists in the content.aspx page where the category0 parameter is not properly sanitized when displaying the Subjects tab in the View Properties menu. It affects authenticated remote users who can inject arbitrary script/HTML vi...

CVE-2014-2729: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option...