Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote malicious users to inject arbitrary web script or HTML via the (1) message ("comment") or (2) name field, or the (3) q parameter in a search action in index.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
photostand photostand 1.2.0 |