CVE-2016-5948

CVE-2016-5948 affects IBM Kenexa LCMS Premier on Cloud. The vulnerability is a cross-site scripting flaw in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Documented CVSS v3.0 vector: CVSS:3.0/AV:N/AC:...