CVE-2007-1768

CVE-2007-1768 affects Mephisto 0.7.3 and Mephisto Edge 20070325. Vulnerable component: app/helpers/application_helper.rb . Issue: Cross-site scripting (XSS) via the author name field in a comment, enabling remote injection of arbitrary web script/HTML. Exploitation details are not provided in the...