Unscored CVE-2008-0687 EUVD-2008-0697GHSA-8vf9-wm7f-wh7m

Cross-site scripting (XSS) vulnerability in siteadmin/editor_files/includes/load_message.php in the Youtube Clone Script allows remote atta…

Published Feb 12, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in siteadmin/editor_files/includes/load_message.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the lang[please_wait] parameter.

References

3635 third-party-advisory
28775 third-party-advisory
20080201 Youtube Clone Xross Site Scripting (load_message.php) mailing-list
27598 vdb-entry