CVE-2012-1898

Multiple cross-site scripting XSS vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 useremail, or 3 userusername parameters...

CVE-2012-1898

CVE-2012-1898 affects Wolf CMS 0.75 and earlier, with multiple XSS vulnerabilities in the admin/user/add path that allow remote attackers to inject arbitrary script or HTML via user[name], user[email], or user[username]. Root cause is improper handling of user input in the add user form, enabling...