CVE-2016-1197

https://notcve.org/view.php?id=CVE-2016-1197

Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775. Vulnerabilidad de XSS en Cybozu Garoon 4.x en versiones anteriores a 4.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML manipulados a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7775. • http://jvn.jp/en/jp/JVN37121456/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000083 https://support.cybozu.com/ja-jp/article/9303 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •