CVE-2012-2985

Cross-site scripting XSS vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the UploadID parameter...

CVE-2012-2985

CVE-2012-2985 is an XSS in CuteSoft Cute Editor 6.4’s InsertDocument.aspx where the GET/POST parameter _UploadID lets remote authenticated users inject script/HTML. The vulnerability is indicated by multiple sources (NVD, Red Hat, CVE lists, CERT entry), all describing a reflected XSS with potent...