Description
Multiple cross-site scripting (XSS) vulnerabilities in Vision Source 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the fields in a user's profile.
References
- 17867 vdb-entry
- 20060506 VisionSource CMS <= 0.6 XSS vectors mailing-list
- 881 third-party-advisory
- visionsource-profile-xss(26325) vdb-entry