CVE-2014-6413

https://notcve.org/view.php?id=CVE-2014-6413

A Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name parameter in the firewall/policy script. Se presenta una vulnerabilidad de Cross-site Scripting (XSS) en WatchGuard XTM versión 11.8.3, por medio del parámetro poll_name en el script firewall/policy. • http://seclists.org/fulldisclosure/2014/Sep/70 http://www.securityfocus.com/bid/69958 https://exchange.xforce.ibmcloud.com/vulnerabilities/96069 https://packetstormsecurity.com/files/128310 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •