Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) autorkomentarza and (2) tresckomentarza parameters.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
vscripts vnews 1.2 |