CVE-2014-9516

Cross-site scripting XSS vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI, related to the "Web Site" input in the Profile section...

CVE-2014-9516

CVE-2014-9516 documents a cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 . The issue allows remote attackers to inject arbitrary web script or HTML by exploiting the PATH_INFO to the default URI, specifically via the “Web Site” input in the Profile section . The primary ...