CVE-2007-0119: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web script or HTML via the plain parameter to 1 mkpwmp.cgi, 2 mkpw.pl, or 3 mkpw.cgi...

EditTag 1.2 - mkpw.cgi?plain Cross-Site Scripting

EditTag 1.2 - mkpw.cgi?plain Cross-Site Scripting source: https://www.securityfocus.com/bid/21891/info EditTag is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...