CVE-2008-2923

The CVE-2008-2923 entry documents a Cross-site scripting (XSS) vulnerability in Lyris ListManager (read/search/results) affecting versions 8.8, 8.95, and 9.3d. The underlying issue is failure to sanitize the user-provided words parameter, allowing remote attackers to inject arbitrary HTML/JavaScr...