Description
Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the _UploadID parameter.
References
- VU#247235 third-party-advisory
Unscored
CVE-2012-2985
EUVD-2012-2963GHSA-6w88-5pfg-98pf
Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arb…
Published Aug 21, 2012 · Updated Sep 17, 2024 · Assigned by certcc