Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web script or HTML via the plain parameter to (1) mkpw_mp.cgi, (2) mkpw.pl, or (3) mkpw.cgi.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Edittag |
Edittag |
1.2 |
1.2 |
References