CVE-2016-9500: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...