There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://support.citrix.com/article/CTX234879 | vendor advisory |