CLiki Cross Site Scripting

`# Exploit Title: CLiki Cross Site Scripting  
# Date: 8.02.2012  
# Author: Sony  
# Software Link: http://www.cliki.net  
# Web Browser : Mozilla Firefox  
# Blog : http://st2tea.blogspot.com  
# PoC:  
http://st2tea.blogspot.com/2012/02/cliki-cross-site-scripting.html  
..................................................................  
  
http://en.wikipedia.org/wiki/CLiki  
  
Simple persistent xss.  
  
Create New Page and put xss code and save this.  
  
And you can see xss on the page.  
  
Also we can see our xss on the "Recent Changes" Page.  
  
http://www.cliki.net/Recent%20Changes  
  
http://2.bp.blogspot.com/-bVPzmm6YAlY/TzKyybsoNMI/AAAAAAAAAcc/9GXowU-nf8w/s1600/12.JPG  
  
..................................................................  
  
InSecurity.Ro  
  
Because we care, we're security aware!  
`