Description
Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281.
References
- 33277 third-party-advisory
- knowledgetree-opensource-unspecified-xss(47529) vdb-entry
- http://wiki.knowledgetree.com/Version_3.5.4a#Security
- 32920 vdb-entry