Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Hotaru.php in the Search plugin 1.3 for Hotaru CMS allow remote attackers to inject arbitrary web script or HTML via the 1 SITENAME parameter to adminindex.php, or the 2 return and 3 search parameters to index.php. NOTE: some of these details a...

CVE-2011-4709

CVE-2011-4709 is an XSS issue in Hotaru CMS (admin_index.php SITE_NAME and related admin/index parameters). Connected Red Hat/Veracode records tie a stored-XSS variant to Hotaru CMS v1.7.2 via SITE_NAME, indicating a broader XSS lineage. The sources here do not specify exact affected versions or ...