CVE-2015-5009

CVE-2015-5009 corresponds to a Cross-Site Scripting (XSS) vulnerability in IBM WebSphere Commerce. Affected products include WebSphere Commerce 6.0 (through FP11) and 6.0 FP4, 7.0 (through FP9) and 7.0 FP5–FP8, and 8.0 prior to 8.0.0.1. The issue allows remote authenticated users to inject arbitr...