Stored Cross-Site Scripting (XSS)

francoisjacquet/rosariosis is vulnerable to stored cross-site scripting XSS attacks. The PreparePHPSELF function incorrectly neutralizes user-controllable inputs allowing a remote attacker to inject and execute harmful javascript...