CVE-2014-8304

Cross-site scripting XSS vulnerability in In-Portal CMS 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the nexttemplate parameter to admin/index.php...

PT-2014-8453

Name of the Vulnerable Software and Affected Versions In-Portal CMS versions 5.2.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the next template parameter to "admin/index.php". Recommendations For In-Portal CMS versions...