PT-2013-1977

Name of the Vulnerable Software and Affected Versions gpEasy CMS version 2.3.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the jsoncallback parameter in the index.php/Admin Preferences file. Recommendations For gpEasy C...