CVE-2011-4565

CVE-2011-4565 concerns XOOPS, affecting version 2.5.1.a (and possibly earlier). It describes two cross-site scripting (XSS) vectors: (1) the text parameter to include/formdhtmltextarea_preview.php and (2) the img BBCode tag within the message parameter to pmlite.php (Private Message). The availab...