Description
Cross-site scripting (XSS) vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs.
References
- bandersnatch-resourcename-xss(35407) vdb-entry
- http://www.portcullis-security.com/182.php
- 26202 third-party-advisory
- 38269 vdb-entry
- 25094 vdb-entry
- http://www.portcullis-security.com/uplds/advisories/Bandersnatch%20-%2007-004.txt