CVE-2012-4848

IBM Lotus Foundations Start before 1.2.2c contains multiple cross-site scripting (XSS) vulnerabilities that allow remote authenticated users to inject arbitrary web script or HTML via the Webconfig Users user-attribute fields (First Name or Last Name). The underlying issue is XSS in the affected ...