Description
Cross-site scripting (XSS) vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
References
- 25985 third-party-advisory
- http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml
- unobtrusive-ajax-rpc-xss(35326) vdb-entry
- 24840 vdb-entry
- 35935 vdb-entry