Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote malicious users to inject arbitrary web script or HTML via Javascript in an IMG tag when submitting news.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
xoops xoops 1.0_rc3 |