Description
Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the g_language parameter.
References
- livezilla-cve20137002-xss(89525) vdb-entry
- 54505 third-party-advisory
- http://packetstormsecurity.com/files/124344
- http://ropchain.org/advisories/CVE-2013-7002.txt
- 20131208 LiveZilla 5.1.0.0 Reflected XSS in translations mailing-list