Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote malicious users to inject arbitrary web script or HTML via HTTP_REFERER (referer).
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
pmachine expressionengine 1.4.1 |