Security Advisory
CVE-2012-6720
6.1
MEDIUM
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to music/create, (2) location parameter to events/create, or (3) search parameter to widget/index/content_id/*.
Published Date
February 11, 2020
Official Source
NIST NVD Advisory