OpenText Web Site Management Server Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in OpenText Web Site Management Server versions 16.7.X, 16.8, and 16.8.1. This vulnerability allows for improper neutralization of input during web page generation, enabling the execution of malicious scripts on the client side. The issue arises when the download query parameter is removed from the file URL, potentially compromising user sessions and data.

Impact

Exploitation of this vulnerability allows for the execution of malicious scripts on the client side, leading to the compromise of user sessions and data.