CVE-2011-3686

CVE-2011-3686 affects Sonexis ConferenceManager (myAddressBook.asp) in versions 9.2.11.0 and 9.3.14.0. The vulnerability allows multiple XSS vectors via the parameters: fname, lname, email_edit, email, email2, email3, sms, sms_id, and work. NVD lists a CVSS v2 base score of 4.3 (network, medium c...