Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1) 10.5(1) 10.6(1) and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters aka Bug ID CSCut53595.