CVE-2016-1304

Cisco Unity Connection 10.5(2.3009) is affected by a cross-site scripting (XSS) vulnerability (CVE-2016-1304) that allows remote attackers to inject arbitrary web script or HTML via a crafted value (Bug ID CSCux82596). Affected component is the HTTP web-based management interface; exploitation is...