CVE-2009-4586

The CVE-2009-4586 entry describes multiple XSS vulnerabilities in index.html of the Wowd client prior to version 1.3.1. The root cause is improper handling of user-supplied input in the search action, allowing injection of arbitrary script or HTML via (1) sortby, (2) tags, or (3) ctx parameters. ...