CVE-2015-5282

Cross-site scripting XSS vulnerability in Foreman 1.7.0 and after...

CVE-2015-5282

Foreman (versions 1.7.0 and later) has a documented Cross‑Site Scripting (XSS) vulnerability that allows a remote attacker to execute HTML. The CNVD entry notes Foreman 1.7.0+ is affected and references a commit (4f3555b217be8723e8045f9816d147b5f684ec57) as part of the fix, indicating a remediati...