Description
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148615.
Remediation
References
Related Vulnerabilities
Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-2372)
WordPress Plugin Tickera-WordPress Event Ticketing Security Bypass (3.4.9.1)
WordPress Plugin About Author Box Cross-Site Scripting (1.0.1)
MySQL CVE-2022-21335 Vulnerability (CVE-2022-21335)
WordPress Plugin Membership 2 Unspecified Vulnerability (4.0.0.2)