Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module parameter.
References
- 13190 vdb-entry
- 12358 vdb-entry
- 20050125 Vulnerabilities in eXponent 0.95 mailing-list
- exponent-module-xss(19061) vdb-entry
- 13188 vdb-entry