CVE-2010-4749

CVE-2010-4749 concerns BLOG:CMS 4.2.1.e (and possibly earlier) with multiple XSS flaws caused by improper input sanitization. The root causes are (1) the body parameter in action.php and (2) the amount and (3) the action parameters in admin/index.php, allowing remote attackers to inject arbitrary...