Description
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148615.
Remediation
References
Related Vulnerabilities
WordPress Plugin OneLogin SAML SSO Unspecified Vulnerability (2.1.8)
MyBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-7305)
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-4415)
WordPress 4.4.x Cross-Site Request Forgery (4.4 - 4.4.17)
WordPress Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-9066)