CVE-2010-4836

CVE-2010-4836 describes a Cross-site scripting (XSS) vulnerability in the register.html page of PHPShop 2.1 EE and earlier. The vulnerability arises from insufficient input sanitization of the name_new parameter, allowing remote attackers to inject arbitrary web script or HTML. Connected document...