CVE

Id
63462  
CVE No.
CVE-2013-3515  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) package parameter to www/admin/plugin-index.php or the (2) group parameter to www/admin/plugin-settings.php.  
Phase
Assigned (20130508)  
Votes
None (candidate not yet proposed)  
Comments