Threats tagged 'ghsa-whp5-c4f8-h8ch'

A cross-site scripting (XSS) vulnerability exists in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME). This flaw allows an unauthenticated remote attacker to execute arbitrary script code by tricking a user into clicking a crafted link. The vulnerability arises from improper validation of user-supplied input in the interface.