Description
Cross-site scripting (XSS) vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string.
References
- http://phpxref.sourceforge.net/Changelog
- http://websecurity.com.ua/4795/
- 70855 vdb-entry
- 46302 vdb-entry
- phpxref-nav-xss(65434) vdb-entry
- 42069 third-party-advisory