Description
IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131.
Remediation
References
Related Vulnerabilities
WordPress Plugin Uploader 'num' Parameter Cross-Site Scripting (1.0.0)
WordPress Plugin Theme Blvd Shortcodes Multiple Security Bypass Vulnerabilities (1.5.2)
WordPress Plugin WP Coder-add custom html, css and js code Cross-Site Request Forgery (2.5.2)
WordPress Plugin Duplicate Page Multiple Vulnerabilities (2.3)
WordPress Plugin Ninja Announcements Lite 'ninja_annc.php' SQL Injection (1.2.3)