CVE-2016-9757

CVE-2016-9757 affects Rapid7 Nexpose 6.4.12 UI, where an authenticated user with tag-creation rights can inject cross-site scripting into the tag name field. When another authenticated user views the tag in the Tag Detail page, the script executes in their browser context. Public references indic...