CVE-2016-5942

The CVE-2016-5942 entry concerns IBM Kenexa LMS on Cloud with a cross-site scripting (XSS) vulnerability that allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected versions are listed as 4.1, 4.2, 4.2.2, 4.2.3, 4.2.4,...