Unscored CVE-2011-2180 EUVD-2011-2172GHSA-q992-986p-ffh2

Cross-site scripting (XSS) vulnerability in dereferer.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inject arbitrar…

Published Jun 29, 2011 · Updated Sep 16, 2024 · Assigned by redhat

Description

Cross-site scripting (XSS) vulnerability in dereferer.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arsc_link parameter.

References

[oss-security] 20110602 CVE request: Multiple security vulnerabilities in ARSC Really Simple Chat mailing-list
[oss-security] 20110602 Re: CVE request: Multiple security vulnerabilities in ARSC Really Simple Chat mailing-list
http://www.htbridge.ch/advisory/xss_in_a_really_simple_chat_arsc.html