Description
A cross-site scripting (XSS) vulnerability exists in NooMS content management system. User input is not properly sanitized before being rendered in the page output.
Impact
Attackers can inject malicious JavaScript code that executes in the context of other users' browsers, allowing session hijacking, credential theft, and page defacement.
Solution
Apply proper output encoding and input validation. Contact the vendor for patches.