CVE-2012-1597

Cross-site scripting XSS vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1597

Cross-site scripting (XSS) in eZ Publish’s eZ JS Core, via the textEncode function in classes/ezjscajaxcontent.php, affects eZ Publish versions before 1.5. Described as allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Root cause/details are not elaborated ...