Detections
Analytics
CVE-2015-4427
medium
Description
Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.114) allow remote authenticated users to inject arbitrary web script or HTML via the (1) page, (2) action, (3) folder_id, or (4) LangType parameter.
References
http://www.securityfocus.com/bid/74942
http://www.securityfocus.com/archive/1/535647/100/0/threaded