CVE-2011-2544

CVE-2011-2544 is a post-authentication XSS in the Cisco TelePresence System MXP Series web interface (MXP, F9.1 and earlier) triggered by a crafted Call ID. The flaw allows arbitrary HTML/script injection and enables CSRF-driven actions such as password changes, via improper input validation in C...