PT-2015-7589

Name of the Vulnerable Software and Affected Versions 4images versions 1.7.11 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cat description parameter in an "updatecat" action to "admin/categories.php". Recommendations F...