Trong Tran created GTNPORTAL-2578: ------------------------------------- Summary: XSS in page title of container Key: GTNPORTAL-2578 URL: https://issues.jboss.org/browse/GTNPORTAL-2578 Project: GateIn Portal Issue Type: Bug Security Level: Public (Everyone can see) Components: Security Affects Versions: 3.4.0.Final Reporter: Trong Tran Assignee: Trong Tran Fix For: 3.5.0.Beta01 Add/Edit a page Choose container tab Drag & drop container ( one row) Change title of container by: </title><script>alert("xssed portal")</script> Click Save => it alerts "xssed portal" message -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira