CVE-2013-4507

CVE-2013-4507 affects CollectiveAccess Providence and Pawtucket up to version 1.3.0. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The root cause is a reflected/stored XSS issue in the web interf...