Cross-site scripting vulnerability in WBNews 1.1.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the Name field.
webmobo wbnews 1.1.0