Description
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572.
Remediation
References
Related Vulnerabilities
WordPress Plugin OAuth Single Sign On-SSO (OAuth Client) Security Bypass (6.22.5)
WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.4)
Joomla! Core 3.x.x Arbitrary File Upload (3.0.0 - 3.1.4)
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-6661)
WordPress Plugin SKU Shortlink For WooCommerce Arbitrary File Disclosure (1.3.4)