CVE-2010-4659

StatusNet (open-source PHP-based micro-blogging platform) contains a cross-site scripting (XSS) vulnerability in error message contents up through 2010. The root cause is insufficient validation of client-side data by the web application, enabling an attacker to execute client-side code via craft...

CVE-2010-4659: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...