Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) rss_url parameter to magpie_slashbox.php, or the url parameter to (2) magpie_simple.php or (3) magpie_debug.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Postnuke | Postnuke_software_foundation | 0.760_rc3 | 0.760_rc3 |
Postnuke | Postnuke_software_foundation | 0.760_rc2 | 0.760_rc2 |
Postnuke | Postnuke_software_foundation | 0.750 | 0.750 |