SweetRice CMS Cross-Site Scripting Vulnerability

SweetRice is a simple content management system developed using PHP. A cross-site scripting vulnerability in as/index.php in SweetRice CMS versions prior to 0.6.7.1 allows remote attackers to inject arbitrary web script or HTML via a topheight cookie...