Description
Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter.
References
- VU#665280 third-party-advisory
- 91765 vdb-entry
- http://www.kb.cert.org/vuls/id/JLAD-ABMPVA