Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via 1 the pcd parameter to editbug.aspx, 2 the bugid parameter to editcomment.aspx, 3 the id parameter to edituserpermissions2.aspx, or 4 the...