Multiple cross-site scripting (XSS) vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors aka Bug IDs CSCue14517 CSCue38914 CSCue38884 CSCue38882 CSCue38881 CSCue38872 CSCue38868 CSCue38866 CSCue38853 and CSCue14540.