PT-2010-5432

Name of the Vulnerable Software and Affected Versions DaDaBIK versions prior to 4.3 beta2 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the select single parameter when the insert or edit feature is enabled. This is a cross-site scripting XSS...