Input validation

A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 16.2.19.1803. Multiple endpoints allow the user to pass the parameter htmlFile, which is included in the HTML output rendering pipeline of a request. Because the Content Server evaluates and executes Oscript...

Cross-Site Scripting (XSS)

html-pipeline is vulnerable to cross-site scripting XSS attacks. The sanitization filter whitelists table elements, allowing a malicious user to inject and execute arbitrary scripts...