Persistent XSS via filtering bypass
This requires that users have authority to edit content, which by default requires a privileged user.
Information for security researchers
CVE Identifier: CVE-2012-5502
Impact Subscore: 2.9
Exploitability Subscore: 6.8
Overall CVSS Score: 2.7
Credit: Mauro Gentile