Security Advisory

CVE-2012-1899

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-09-17 20:00:00
Last updated 2024-08-06 19:17:27
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name, (2) Last name or (3) Email (required) fields.