CVE-2015-7458

IBM Connections is affected by a cross-site scripting (XSS) vulnerability across multiple versions (3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4). The underlying cause is input validation failure that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Pub...