CVE-2011-4918

CVE-2011-4918 affects Elxis CMS versions 2009.2, 2009.3 and 2009.3 Aphrodite prior to revision 2684. The vulnerability is multiple cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via (1) the task parameter to elxis/index.php and (2) PATH_INFO to elxi...