Description
Multiple cross-site scripting (XSS) vulnerabilities in WebEOC before 6.0.2 allow remote attackers to inject arbitrary web script and HTML via unknown vectors.
References
- http://www.kb.cert.org/vuls/id/JGEI-6BVST4
- VU#138538 third-party-advisory