Description
Cross-site scripting (XSS) vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action.
References
- 29346 vdb-entry
- 45615 vdb-entry
- 30367 third-party-advisory
- savacmsindex-xss(49224) vdb-entry
- http://holisticinfosec.org/content/view/67/45/