Description
IBM Campaign is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Corporation Campaign
7.0affected7.1affected7.2affected7.3affected7.4affected7.5affected8.1affected8.2affected8.3affected8.4affected8.5affected8.6affected9.0affected9.1affected8.0affected7.6affected9.1.1affected9.1.2affected10.0affected