title: SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting
description: SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.
problem types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
vendor: SearchBlox
product: SearchBlox
versions:
status: affected, version: 0, lessThan: 9.2.1, versionType: custom
}