TI-2012-00903 CVE-2012-0989 · GHSA-33gc-p3fc-rqq7Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition…Priority LOW 23Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01631 · Published 2012-10-01 · No fix listed CWE-79