Multiple cross-site scripting (XSS) vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via (1) the signature in dans profile, or (2) search.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Phpx | Phpx | 3.5.15 (including) | 3.5.15 (including) |