Multiple cross-site scripting (XSS) vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ofdisp and (2) ofmsgid parameters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openforum | 2enetworx | * | 1.2_beta (including) |