Description
Cross-site scripting (XSS) vulnerability in add_comment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
References
- http://www.secvsn.com/content/Advisories/sr-060607-lightblog.html
- 20070606 Light Blog 4.1 XSS Vulnerability mailing-list
- 25561 third-party-advisory
- lightblog-addcomment-xss(34753) vdb-entry
- 2783 third-party-advisory