CVE-2012-1021

Cross-site scripting XSS vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the catparentid parameter in an addcat action...