Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SimpGB 1.46.02 allow remote attackers to inject arbitrary web script or HTML via 1 the lusername parameter to the default URI under admin/ or 2 the lemoticonlist parameter to admin/emoticonlist.php...