CVE-2013-5983: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the 1 "an" parameter to agenda.php or 2 cat parameter to mobile/thread.php...

PT-2014-3010

Name of the Vulnerable Software and Affected Versions GuppY versions prior to 4.6.28 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities can be...