Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

PT-2010-5604

Name of the Vulnerable Software and Affected Versions XWiki Watch version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the rev parameter to API endpoints such as "bin/viewrev/Main/WebHome" and "bin/view/Blog", and the register...