Unscored CVE-2012-4950 EUVD-2012-4875GHSA-cwv2-77rj-p78r

Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to …

Published Nov 18, 2012 · Updated Aug 6, 2024 · Assigned by certcc

Description

Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages.

References

pattern-insight-keyword-search-xss(79787) vdb-entry
VU#802596 third-party-advisory
87053 vdb-entry
56381 vdb-entry
51203 third-party-advisory