CVE-2016-6217

Sophos PureMessage for UNIX is affected by a Cross-Site Scripting (XSS) vulnerability prior to version 6.3.2, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. The CNVD/NVD entries confirm the affected product and version range, with remediation recommended...