Description
Cross-site scripting (XSS) vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web script or HTML via the category parameter.
References
- http://www.rooksecurity.com/blog/?p=19
- pligg-category-xss(44189) vdb-entry
- 30516 vdb-entry
- 4129 third-party-advisory
- 20080802 Pligg Auto-Voter Using XSS to Bypass CSRF Protection mailing-list