Description
IBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119821.
Remediation
References
Related Vulnerabilities
WordPress Plugin Post Custom Templates Lite Cross-Site Scripting (1.6)
WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (1.7.0)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-9637)
PHP Other Vulnerability (CVE-2006-4023)
WordPress Plugin PI Button includes Backdoor [Only if downloaded via the vendor website] (3.3.3)