The host is installed with IBM Web Experience Factory 7.0 or 7.0.1 and is prone to multiple cross-site scripting (XSS) vulnerabilities. The flaws are present in the application, which fails to properly sanitize user-supplied input. Successful exploitation allows remote attackers to inject arbitrary web script or HTML