CVE-2009-2930

CVE-2009-2930 is an XSS vulnerability in elka CMS (aka Elkapax), affecting the Search feature. The issue allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI. According to NVD, the exploitability vector is Network with Medium complexity and no auth...