PT-2012-3843

Name of the Vulnerable Software and Affected Versions Plume CMS versions 1.2.4 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via the u email parameter also known as th...