CVE-2009-4253

Power Phlogger vulnerability CVE-2009-4253: Cross-site scripting in dspStats.php (PowerPhlogger 2.2.5) allows remote attackers to inject arbitrary web script or HTML via the edit parameter. Root cause: failure to properly sanitize user-supplied input. The issue is documented across multiple feeds...