• info
• discussion
• exploit
• solution
• references

Citrix XenServer XenAPI HTTP Interfaces Cross-Site Scripting Vulnerability

Solution:
Citrix has released a hotfix that can be downloaded by issuing a 'Check for Updates' request from the XenCenter GUI.