CVE-2007-3202

Cross-site scripting XSS vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document...

CVE-2007-3202

The CVE-2007-3202 entry describes a Cross-site scripting (XSS) vulnerability in the Webwiz rich text editor . An attacker can inject arbitrary script/HTML by sending URL-encoded HTML that uses a frameset where a frame’s SRC points to a JavaScript document. This enables remote exploitation per the...