Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php.Referenceshttp://seclists.org/fulldisclosure/2016/Aug/122http://www.securityfocus.com/bid/92632https://www.alienvault.com/forums/discussion/7558/
