CVE-2015-0727

CVE-2015-0727 is an XSS vulnerability in the HTTP module of Cisco Security Manager (CSM) 4.7(0)SP1(1). The root cause is insufficient validation of user-supplied input in the vulnerable web interface, enabling remote attackers to inject arbitrary script or HTML via a crafted URL (Bug CSCut27789)....