Cross site scripting

Cross-site scripting XSS vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1150...

CVE-2016-1150

The CVE concerns Cybozu Office web application versions 9.0.0–10.3.0 with a cross‑site scripting (XSS) vulnerability. Connected sources (OpenVAS and CNVD entries) confirm the affected product range and XSS as the issue type but describe vectors as unspecified. No explicit exploit details, access ...