Description
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733.
References
- 68691 vdb-entry
- 60546 third-party-advisory
- 20140717 Multiple Cross-Site Scripting Vulnerabilities in Cisco Customer Voice Portal vendor-advisory