bugs cross-site scripting vulnerability

Bugs is a branch of the open-source Tinyissue (defect tracking system) by Alexandre Plennevaux, a Belgian individual developer. bugs 1.8 and earlier versions of install/index.php are vulnerable to cross-site scripting, which can be exploited by remote attackers to inject arbitrary web scripts via email parameters or HTML.