CVE-2008-5228

CVE-2008-5228 describes a cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8. The issue arises when a Page Navigation Component displays menu entries, allowing remote attackers to inject arbitrary web script or HTML via parameters in the URI...