CVE-2011-2754

Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2011-07-17

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Web Content Manager (Ibm)
• Websphere Portal (Ibm)

References

• http://secunia.com/advisories/45106
• http://www.ibm.com/support/docview.wss?uid=swg21503959