Description
Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages.
References
- GLSA-200406-15 vendor-advisory
- 20040611 [SNS Advisory No.73] Usermin Cross-site Scripting Vulnerability mailing-list
- 10521 vdb-entry
- http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/73_e.html
- usermin-email-xss(16494) vdb-entry