Description
Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form.
References
- 21756 vdb-entry
- 1017445 vdb-entry
- 2087 third-party-advisory
- http://www.l0j1k.com/security/CMSMadeSimple_1.0.2_25Dec06.txt
- 20061225 XSS - CMS Made Simple v1.0.2 mailing-list