CVE-2003-0283

Phorum prior to 3.4.3 is affected by a cross-site scripting (XSS) vulnerability in which an attacker can inject arbitrary script/HTML via a message whose subject, author name, or author e-mail is preceded by a "<<" before a tag name. This affects the handling of user-supplied content and ca...