CVE-2013-4624

This exploit demonstrates multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM by injecting malicious JavaScript into form inputs. The PoC submits forms with payloads that trigger alert popups with document.cookie, proving arbitrary script execution in the context of the affected website.

The provided text describes a cross-site scripting (XSS) vulnerability in Jahia xCM, where user-supplied input is not properly sanitized. The example URL demonstrates an XSS payload that executes arbitrary JavaScript in the context of the affected website.