CVE-2009-3593

Multiple cross-site scripting XSS vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to placebid.php and 2 jobid parameter to postresume.php...

CVE-2009-3593

CVE-2009-3593 affects Freelancers 1.0 and involves XSS in two parameters: the id parameter to placebid.php and the jobid parameter to post_resume.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Reported CVSS v2 base score is 4.3 (MEDIUM) with network attack ...