Cross-site scripting (XSS) vulnerability in Mephisto 0.7.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search script.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mephisto | Mephisto | 0.7.3 (including) | 0.7.3 (including) |