Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote malicious users to inject arbitrary web script or HTML via the (1) bookCopyright and (2) ver parameters to (a) footer.php, and the (3) bookName, (4) bookMetaTags, and (5) estiloCSS parameters to (b) header.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
eejj33 blackbook 1.0 |