Description
Cross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enable_category action to index.php.
Unscored
CVE-2012-5163
EUVD-2012-5086GHSA-8cv6-5hqj-rcj2
Cross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web …
Published Sep 26, 2012 · Updated Aug 6, 2024 · Assigned by mitre