Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in forumnewtopic.php in Chameleon Social Networking allow remote attackers to inject arbitrary web script or HTML via the 1 threadtitle and 2 threaddescription parameters in a message...

CVE-2010-4366

CVE-2010-4366: Concrete details across connected records show XSS in Chameleon Social Networking. The vulnerability is in forum_new_topic.php, exploitable via user-supplied thread_title and thread_description parameters in a message. Affected component: the forum topic creation feature of Chamele...