| Package | Affected versions | Patched versions |
|---|---|---|
| content suite | = 5.0= 6.0= 7.0 | |
| storyserver | = 4.0= 4.1= 5.0 | |
| vignette | = 5.0 |
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free