Talenturm

**Name of the Vulnerable Software and Affected Versions** light0011 cms (affected versions not specified) **Description** An issue exists in the Chapter Content Output component within the file App/Home/View/Default/Chapter/oneChapter.tpl. The `htmlspecialchars decode()` function fails to properly handle the `content` argument, allowing for remote cross-site scripting (XSS), a technique where malicious scripts are injected into trusted websites. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the `content` argument in the App/Home/View/Default/Chapter/oneChapter.tpl file to minimize the risk of exploitation.