CVE-2012-1575

Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.

Date published : 2012-04-22

http://www.securityfocus.com/bid/53000

https://bugzilla.redhat.com/attachment.cgi?id=571986