Posted by Steffen Rösemann on Jan 06

Advisory: Reflecting XSS vulnerability in CMS Kajona v. 4.6
Advisory ID: SROEADV-2015-01
Author: Steffen Rösemann
Affected Software: CMS Kajona v. 4.6
Vendor URL: https://www.kajona.de
Vendor Status: solved
CVE-ID: –

==========================
Vulnerability Description:
==========================

The CMS Kajona v. 4.6 is vulnerable to a reflecting XSS vulnerability in
its administrative backend.

==================
Technical Details:…