CVE-2012-4938

Publication date

2012-11-18 21:00:00

Family

certcc

State

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3 allows remote authenticated administrators to inject arbitrary web script or HTML via the banner message.