Description
Multiple cross-site scripting (XSS) vulnerabilities in ReciPants 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields.
References
- 1009984 vdb-entry
- 11533 third-party-advisory
- http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415
- 5787 vdb-entry
- 10250 vdb-entry