CVE-2008-5228
IBM WCM <6.1 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being encoded."
References (6)
Scores
EPSS
0.0046
EPSS Percentile
64.0%
Classification
CWE
CWE-79
Status
published
Affected Products (3)
ibm/workplace_content_management
ibm/workplace_content_management
n/a/n/a
Timeline
Published
Nov 25, 2008
Tracked Since
Feb 18, 2026