Description
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via (1) the check_tags function or (2) the editbio field in the user profile.
References
- 12779 vdb-entry
- 20050311 PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities mailing-list
- photopost-editbio-xss(19678) vdb-entry
- 14576 third-party-advisory