CVE-2011-1670

CVE-2011-1670 is an XSS vulnerability in InTerra Blog Machine 1.84 (and possibly earlier) due to unsafely handling the subject parameter in post_url/edit via actions/add.php. Remote attackers can inject arbitrary script/HTML that executes in a user’s browser. Some sources also describe related CS...