Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in mesajformu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Isim, 2 Mesajiniz, and 3 E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php...