PT-2012-6192

Name of the Vulnerable Software and Affected Versions b2evolution version 4.1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the message body in blogs/blog1.php. Recommendations For version 4.1.3, updat...

CVE-2012-5911: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body...