Description
Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter.
References
- 20020104 Cross-Site Scripting in PlumTree? mailing-list
- plumtree-css-error(7817) vdb-entry
- 3799 vdb-entry
- 20020124 Plumtree Corporate Portal Cross-Site Scripting (Patch Available) mailing-list