Description
Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to emailrecipe.aspx, (2) id parameter to recipedetail.aspx, and the (3) catid parameter to validatefieldlength.aspx.
References
- 32837 vdb-entry
- 20081215 Multiple XSS Vulnerabilities in World Recipe 2.11 mailing-list
- worldrecipe-multiple-xss(47366) vdb-entry