Description
Cross-site scripting (XSS) vulnerability in archive/savedqueries/savequeryfinish.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
References
- openeditdam-name-xss(47690) vdb-entry
- 33339 third-party-advisory
- 51026 vdb-entry
- 33064 vdb-entry
- http://holisticinfosec.org/content/view/96/45/