CVE-2016-6201 Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or HTML via the ContTyp...
MediumCVSS 6.1
EPSS 0.89%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or HTML via the ContType parameter in a ViewContentByCategory action to WorkArea/content.aspx.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ektron content management system | <= 9.10 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry