CVE-2010-4895

CVE-2010-4895 affects chillyCMS 1.1.3, with the vulnerability in core/showsite.php where input from the name parameter (username field) enables cross-site scripting (XSS). The issue allows remote attackers to inject arbitrary web script or HTML. Public references corroborate XSS wording; no expli...