PAD CMS Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in PAD CMS, affecting all templates: www, bip, and www+bip. This vulnerability arises in the printing and 'save to PDF' functionalities, where an attacker can craft a URL that, when opened, executes arbitrary JavaScript in the victim's browser. All versions of PAD CMS through 1.2.1 are vulnerable.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute malicious JavaScript in the context of the victim's browser.