Cross site scripting

Cross-site scripting XSS vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2009-2586

The CVE-2009-2586 entry describes a Cross-site Scripting (XSS) flaw in EDGEPHP EZArticles, specifically in articles.php where an attacker can inject script/HTML through the title parameter. Affected component: EDGEPHP EZArticles (articles.php). Root cause: improper handling/escaping of the title ...