CVE-2014-2939

Alfresco Enterprise before 4.1.6.13 is affected by multiple XSS vulnerabilities where an attacker can inject arbitrary script/HTML via (1) an XHTML document, (2) the