Cross-site scripting (XSS) vulnerability in Jahia xCM before 6.6.2 allows remote authenticated users to inject arbitrary web script or HTML via the "about me" field. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
XSS
Jahia Xcm
NVD
CVSS 2.0
3.5
EPSS
0.2%
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management -. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.
IBM
XSS
Infosphere Master Data Management Server For Product Information Management
Infosphere Master Data Management Collaboration Server
NVD
CVSS 2.0
3.5
EPSS
0.2%