Description
Cross-site scripting (XSS) vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding (TNG) 7.1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
References
- 10387 exploit
- nggs-msg-xss(54726) vdb-entry
- 37711 third-party-advisory