CVE-2011-5220

PHP-SCMS 1.6.8 and earlier are affected by an XSS in templates/default/Admin/Login.html. The vulnerability arises from unsanitized lang parameter passed to index.php, allowing remote attackers to inject arbitrary script/HTML. Impact is described as cross-site scripting with no explicit exploitati...