Security Advisory

CVE-2012-4052

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-08-20 20:00:00
Last updated 2024-09-16 23:21:38
Assigner mitre
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.