Security Advisory
CVE-2014-8557
4.3
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in JExperts Channel Platform 5.0.33_CCB allow remote attackers to inject arbitrary web script or HTML via the (1) usuario.nome variable in an editarUsuario action to usuario.do or (2) titulo.form variable in a novoChamado action to ticket.do.
Published Date
November 13, 2014
Official Source
NIST NVD Advisory