Description
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708.
Remediation
References
Related Vulnerabilities
WordPress Plugin MapifyLite (by MapifyPro) Cross-Site Scripting (3.3)
WordPress Plugin W3 Total Cache Server-Side Request Forgery (0.9.7.3)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5268)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15695)
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33333)