CVE-2014-8869: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...