CVE-2015-0752

Cross-site scripting XSS vulnerability in Cisco TelePresence Video Communication Server VCS X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635...

CVE-2015-0752

Cisco TelePresence Video Communication Server (VCS) version X8.5.1 is vulnerable to a cross‑site scripting (XSS) flaw in the web interface caused by improper input validation. A remote attacker can supply a crafted URL to inject arbitrary HTML/JavaScript in the user’s browser, potentially leading...