PT-2015-6923

Name of the Vulnerable Software and Affected Versions PivotX versions prior to 2.3.11 Description A cross-site scripting XSS issue exists due to insufficient validation of user input in the form method, allowing remote attackers to inject arbitrary web script or HTML. This is related to the PHP...

CVE-2015-5456: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the form method in modules/formclass.php in PivotX before 2.3.11 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO, related to the "PHPSELF" variable and form actions...