TI-2012-02592 CVE-2012-2985 · GHSA-6w88-5pfg-98pfCross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor…Priority LOW 18Cross-site scripting (XSS) vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the _UploadID parameter.CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00831 · Published 2012-08-21 · No fix listed CWE-79