Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
| Software | From | Fixed in |
|---|---|---|
| tenable / securitycenter | 4.7 | 4.7.x |
| tenable / securitycenter | 4.6 | 4.6.x |