Description
Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field.
References
- 20060117 XSS in WBNews < = v1.1.0 mailing-list
- 16277 vdb-entry
- 18499 third-party-advisory
- ADV-2006-0237 vdb-entry