CVE-2014-9562

CVE-2014-9562 describes a cross-site scripting vulnerability in OptimalSite CMS, specifically in the file display_dialog.php. The vulnerability allows remote attackers to inject arbitrary script or HTML via the image parameter on OptimalSite CMS versions 0.1 and 2.4. The issue is confirmed by mul...