Description
Cross-site scripting (XSS) vulnerability in manager/xmedia.php in Plume CMS 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the dir parameter.
References
- plume-xmedia-xss(40841) vdb-entry
- 1019507 vdb-entry
- http://www.digitrustgroup.com/advisories/web-application-security-plume-cms.html
- 29116 third-party-advisory
- 27999 vdb-entry