CVE-2012-6557

Multiple XSS vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary script/HTML via any of 15 AboutMe fields on the Edit My Details page (RealName, Name, Quote, Loc, Emp, JobTit, HS, Col, Bio, Inter, Mus, Gam, Mov, FTV, Bks). Affected software: V...