CVE-2010-4882

Auto CMS 1.6 is affected by a cross-site scripting (XSS) vulnerability in autocms.php, exploitable via the sitetitle parameter. The root cause is insufficient input sanitization of sitetitle, allowing remote attackers to inject arbitrary HTML/JavaScript into the user’s browser. The CVE entry CVE-...