Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and possibly (2) message parameters. NOTE: some of these details are obtained from third party information.
AV:N/AC:M/Au:N/C:N/I:P/A:N
04/05/2010
by Webmobo
14 years ago