CVE-2016-5660 (civic_platform_citizen_access_portal)
Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter.
Source: CVE-2016-5660 (civic_platform_citizen_access_portal)