Description
Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard.
References
- 20040101 Possible XSS vuln in VCard4J mailing-list
- 9343 vdb-entry
- vcard4j-nickname-xss(14120) vdb-entry
- 1008582 vdb-entry