CVE-2008-0547

CVE-2008-0547 is a cross-site scripting (XSS) vulnerability in CandyPress (CP) 4.1.1.26 and probably earlier 4.x and 3.x versions. It affects the admin/utilities_ConfigHelp.asp page where the helpfield parameter can be exploited by remote attackers to inject arbitrary web script or HTML. The issu...