Description
Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the (1) IRC Server or (2) AIM ID fields in the user profile.
References
- pforum-irc-aim-xss(17003) vdb-entry
- 20040814 pscript.de PFORUM XSS Vulnerability mailing-list
- 10954 vdb-entry
- 8985 vdb-entry
- http://www.pscript.de/news/index.php
- VU#674542 third-party-advisory
- 12317 third-party-advisory