Cross-site scripting (XSS) vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in (1) webmaster/index.php and (2) search.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Dating_agent_pro | Datetopia | 4.7.1 (including) | 4.7.1 (including) |