CVE-2010-3462

Mollify is affected by a Cross-site Scripting (XSS) vulnerability in backend/plugin/Registration/index.php, affecting Mollify 1.6 and 1.6.5.5 (and possibly other versions). The issue allows an attacker to inject arbitrary script/HTML via the confirm parameter. OpenVAS entries describe the flaw as...

CVE-2010-3462

Cross-site scripting XSS vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the confirm parameter. NOTE: some of these details are obtained from third party information...