Cross site scripting

Cross-site scripting XSS vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter aka Email address field in an edituser configuration action...

PT-2012-3708

Name of the Vulnerable Software and Affected Versions SyndeoCMS versions 3.0.01 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote authenticated users to inject arbitrary web script or HTML via the email parameter in an edit user configurati...