CVE-2013-5501

Cross-site scripting XSS vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328...

CVE-2013-5501

Cisco MediaSense is affected by a cross-site scripting (XSS) vulnerability in the oraservice page. The issue stems from insufficient input validation of a parameter, allowing an unauthenticated, remote attacker to execute arbitrary script or HTML in a user’s browser via a crafted link. Cisco’s ad...