Description
Multiple cross-site scripting (XSS) vulnerabilities in objects/createobject.php in Open Constructor 3.12.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) name or (2) description parameter.
Unscored
CVE-2012-3870
EUVD-2012-3814GHSA-49g9-xqq4-3p7j
Multiple cross-site scripting (XSS) vulnerabilities in objects/createobject.php in Open Constructor 3.12.0 allow remote authenticated users…
Published Dec 28, 2012 · Updated Sep 16, 2024 · Assigned by mitre