CVE:CVE-2012-1034
CNNVD:CNNVD-201202-147
EPiServer CMS至6R2版本的admin interface（管理界面）中存在多个跨站脚本漏洞（XSS）。远程攻击者可利用该漏洞借助未明向量注入任意web脚本或HTML。
solution:Upgrade episerver episerver_cms to a higher version than 5.1.422.4,5.1.422.122,5.1.422.256,5.1.422.267,5.2.375.7,5.2.375.133,5.2.375.236,6.0.530.0,6.1.379.0,and avoid the version 5.1.422.4,5.1.422.122,5.1.422.256,5.1.422.267,5.2.375.7,5.2.375.133,5.2.375.236,6.0.530.0,6.1.379.0