Apache OpenMeetings Event Description Cross-Site Scripting (CVE-2016-2163)

A cross-site scripting vulnerability has been reported in the event handling component of Apache OpenMeetings. The vulnerability is due to insufficient validation of input for event descriptions. A remote, authenticated attacker could exploit this vulnerability by scheduling an event with a craft...

CVE-2016-2163

CVE-2016-2163 affects Apache OpenMeetings prior to 3.1.1. The issue is a Cross-Site Scripting (XSS) in the event creation flow where the event description can be crafted to inject script/HTML. Root cause is insufficient validation of input in the event description field. Impact is remote, unauthe...