CVE-2015-6400

Cisco Emergency Responder Web Framework Cross-Site Scripting Vulnerability (CVE-2015-6400) affects Cisco Emergency Responder 10.5(1a). The issue is a stored XSS flaw caused by insufficient validation on input fields in the web framework, allowing an unauthenticated, remote attacker to inject and ...