Description
Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter.
References
- 33296 third-party-advisory
- 33063 vdb-entry
- http://holisticinfosec.org/content/view/95/45/
- 51028 vdb-entry
- openeditdam-catalogid-xss(47692) vdb-entry