CVE-2012-5452

Multiple cross-site scripting XSS vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 multititle parameter to blocks/add/; 2 cost, 3 days, or 4 titleen parameter to plans/add/; 5 name or 6 titleen parameter to fields/group/add/ in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 admin/accounts/, 2 admin/manage/, or 3 admin/manage/blocks/edit/; or 4 group parameter to admin/configuration/. NOTE: The...

CVE-2012-5452

CVE-2012-5452 affects Subrion CMS 2.2.1, with multiple XSS vectors exploitable via parameters across blocks/add, plans/add, fields/group/add (admin/manage), and advsearch. The root cause is improper input handling that allows injection of arbitrary scripts/HTML into user-visible fields (e.g., mul...