VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 9, 2015· Updated Jun 17, 2026

CVE-2015-4427

CVE-2015-4427

Description

Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.114) allow remote authenticated users to inject arbitrary web script or HTML via the (1) page, (2) action, (3) folder_id, or (4) LangType parameter.

Affected products

2
  • Ektron/Ektron Content Management System2 versions
    cpe:2.3:a:ektron:ektron_content_management_system:*:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ektron:ektron_content_management_system:*:sp1:*:*:*:*:*:*range: <=9.1
    • (no CPE)range: < 9.10 SP1 (Build 9.1.0.184.1.114)

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.