Multiple cross-site scripting (XSS) vulnerabilities in admin.tool CMS 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fSid or (2) fSrcBegriffe parameters in unspecified vectors.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Admin.tool_cms_3 | Fixpunkt_gmbh | and_previous (including) | and_previous (including) |