Description
Cross-site scripting (XSS) vulnerability in index.php in Monster Top List (MTL) 1.4 allows remote attackers to inject arbitrary web script or HTML via the user_error_message parameter.
References
- 20060525 XSS in Monster Top List | MTL 1.4 mailing-list
- monstertoplist-index-xss(26806) vdb-entry
- 977 third-party-advisory