CVE-2023-23956 – Symantec SiteMinder WebAgent v12.52 - Cross-site scripting (XSS)

https://notcve.org/view.php?id=CVE-2023-23956

A user can supply malicious HTML and JavaScript code that will be executed in the client browser Symantec SiteMinder WebAgent version 12.52 suffers from a cross site scripting vulnerability. • https://www.exploit-db.com/exploits/51530 http://packetstormsecurity.com/files/173038/Symantec-SiteMinder-WebAgent-12.52-Cross-Site-Scripting.html https://support.broadcom.com/external/content/SecurityAdvisories/0/22221 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •