CVE-2015-5008

CVE-2015-5008: An XSS vulnerability in IBM WebSphere Commerce affecting 6.0 (including FP11) and 6.0 FP4, 7.0 (including FP9) and 7.0 FP5–8, and 8.0 before 8.0.0.1. Remote attackers can inject arbitrary web script or HTML via a crafted URL. Impact details in the sources indicate potential browser...