CVE-2004-2355

Cross-site scripting XSS vulnerability in Crafty Syntax Live Help CSLH before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session...

CVE-2004-2355

Crafty Syntax Live Help (CSLH) prior to 2.7.4 is affected by a Cross-site scripting (XSS) vulnerability. The issue, described in CVE-2004-2355, allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session. Supported by NVD entry, the description ...

CVE-2004-2355

Cross-site scripting XSS vulnerability in Crafty Syntax Live Help CSLH before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session...

Crafty Syntax Live Help 2.7.3 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/10463/info CSLH is prone to multiple HTML injection vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. The problem presents itself in various modules of the application and can allow remote attackers to inject HTML...