CVE-2014-1238

This CVE (CVE-2014-1238) is a Cross-Site Scripting (XSS) in Gael/Q-Pulse 0.6 and earlier, affecting the UI path ui/common/managedlistdialog.aspx. The vulnerability arises from unvalidated input being inserted into a JavaScript variable named $RootTree, exploitable via a crafted URL (e.g., LookupL...

CVE-2014-1238: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...