CVE-2014-1237

CVE-2014-1237: XSS in synetics i-doit Pro prior to 1.2.4. The vulnerability arises from insufficient encoding of user-supplied data, allowing remote attackers to inject arbitrary web script or HTML via the call parameter. Affected: i-doit Pro before 1.2.4 (and likely earlier versions per advisory...