CVE-2014-0670

Cisco MediaSense is affected by a Cross-Site Scripting (XSS) vulnerability in the Search and Play interface (CVE-2014-0670). The root cause is insufficient input validation of a parameter, enabling an unauthenticated, remote attacker to inject arbitrary web script or HTML by luring a user to a ma...

CVE-2014-0670

Cross-site scripting XSS vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686...