CVE-2006-1554

CVE-2006-1554 concerns a cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0. The issue arises from insufficient sanitization of the name parameter in the comment-adding workflow, allowing remote attackers to inject arbitrary web scripts or HTML. The vulnerability is tied to the comment ...