groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php (path parameter).
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
