Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27 6.1.5 through 6.1.5.3 CF27 7.0.0 before 7.0.0.2 CF29 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF03 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.