CVE-2016-10216

ITDB 1.23 and earlier permits XSS via insufficient filtering of the value POST parameter sent to itdb-1.23/js/DataTables-1.8.2/examples/examples_support/editable_ajax.php. An attacker could inject and execute arbitrary HTML/JavaScript in a user’s browser within the vulnerable website context. The...