Unscored CVE-2011-4552 EUVD-2011-4478GHSA-jqj5-h9pw-8jq2

Multiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or…

Published Dec 6, 2011 · Updated Sep 16, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the description field of (1) a new vote or (2) the eject member proposal feature.

References

[oneclickorgs-devspace] 20111117 Announce: One Click Orgs 1.2.3 mailing-list
http://dmcdonald.net/?page_id=43