Description
Multiple cross-site scripting (XSS) vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to (1) suggest-category.php and (2) suggest-listing.php.
References
- http://packetstormsecurity.org/files/view/96181/esyndicat23-xss.txt
- 42484 third-party-advisory
- 45093 vdb-entry
- 69639 vdb-entry
- 69638 vdb-entry