Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) CatName, (2) CaricatierID, or (3) CatID parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Al-caricatier | Al-caricatier | 2.5 (including) | 2.5 (including) |