Cross-site Scripting Vulnerability in Cisco WebEx Social Portal Module
CVE-2013-1244

Currently unrated

Key Information:

Vendor
Cisco
Status
Webex Social
Vendor
CVE Published:
16 May 2013

Summary

A Cross-site Scripting vulnerability exists in the Cisco WebEx Social Portal Module, which enables remote authenticated users to inject arbitrary web scripts or HTML. This is achieved via a javascript: URL in the link field of a post, leading to potential exploitation opportunities. It is crucial for users and administrators to apply necessary patches and follow security best practices to mitigate risks associated with this vulnerability.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.