CVE-2007-5455

The CVE-2007-5455 entry describes a Cross-site Scripting (XSS) vulnerability in the wxis.exe component of WWWISIS 7.1 and earlier . The issue allows remote attackers to inject arbitrary script or HTML via the IsisScript code path (iah/iah.xis), potentially involving the lang or exprSearch paramet...