CVE-2005-4476

The CVE-2005-4476 entry documents a Cross-site scripting (XSS) vulnerability in OpenEdit 4.0 and earlier, specifically in store/search/results.html, exploitable via the oe-action and page HTTP parameters. The issue allows remote attackers to inject arbitrary web script or HTML. Affected product i...