CVE-2011-3998

Apple WebObjects 5.2 and earlier are affected by a cross-site scripting (XSS) vulnerability. The issue permits remote attackers to cause arbitrary JavaScript/HTML execution in a user’s browser via unspecified vectors. Affected software is WebObjects, a web application server from Apple, with the ...