Description
Cross-site scripting (XSS) vulnerability in WiredRed e/pop Web Conferencing 4.1.0.755 allows remote authenticated users to inject arbitrary web script or HTML via the topic name of a conference.
References
- 16542 vdb-entry
- epop-topic-xss(24609) vdb-entry
- ADV-2006-0505 vdb-entry
- 20060208 WiredRed EPOP XSS Vulnerability mailing-list
- 421 third-party-advisory
- 22997 vdb-entry
- 18753 third-party-advisory