PT-2015-4993

Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 8.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via two main avenue...

CVE-2015-0967: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SearchBlox before 8.2 allow remote attackers to inject arbitrary web script or HTML via 1 the search field in plugin/index.html or 2 the title field in the Create Featured Result form in admin/main.jsp...