CVE-2012-6720

Multiple cross-site scripting XSS vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to music/create, 2 location parameter to events/create, or 3 search parameter to widget/index/contentid/...

PT-2020-7323

Name of the Vulnerable Software and Affected Versions: SocialEngine versions prior to 4.2.4 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the title parameter to "music/create", the location parameter to "events/create", or the sear...