PT-2013-5103

Name of the Vulnerable Software and Affected Versions Jahia xCM version 6.6.1.0 before hotfix 7 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via severa...

CVE-2013-4624: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow remote attackers to inject arbitrary web script or HTML via 1 the site parameter to engines/manager.jsp, 2 the searchString parameter to administration/ in a search action, or the 3 username, 4 firstName,...