CVE-2015-7916

https://notcve.org/view.php?id=CVE-2015-7916

Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query. Vulnerabilidad de XSS en Sauter EY-WS505F0x0 moduWeb Vision en versiones anteriores a 1.6.0 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una consulta manipulada. • http://seclists.org/fulldisclosure/2016/Feb/25 https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •