CVE-2007-2310

The CVE-2007-2310 entry concerns a Cross-site Scripting (XSS) vulnerability in BloofoxCMS 0.2.2, specifically in the plugins/spaw/img_popup.php component. The underlying issue is an input handling flaw in the img_url parameter that allows an attacker to inject arbitrary web script or HTML, enabli...