Description
Cross-site scripting (XSS) vulnerability in webcheck before 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the (1) url, (2) title, or (3) author name in a crawled page, which is not properly sanitized in the tooltips of a report.
References
- 19309 third-party-advisory
- webcheck-content-xss(25428) vdb-entry
- http://ch.tudelft.nl/~arthur/webcheck/news.html#20060130
- 17212 vdb-entry