CVE-2007-0694

DGNews 2.1 is affected by a cross-site scripting (XSS) vulnerability in footer.php that allows remote attackers to inject arbitrary web script or HTML via the copyright parameter. The issue arises when user-controlled content is reflected back in the page, enabling script execution in the victim’...