Cross-Site Scripting (XSS)

Red Hat Certificate System RHCS is vulnerable to cross-site scripting. It does not escape the 1 pageStart or 2 pageSize to the displayCRL script, or 3 nonce variable to the profileProcess script, allowing the attack against via Certificate System's web interface...