Geeklog Cross-Site Scripting Vulnerability

Geeklog is open source software that can be used as a Weblog, CMS or Web Portal. Geeklog suffers from a cross-site scripting vulnerability that stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary web script or HTML via a well-designed payload injection email setup (backend, host, port, auth).