PT-2014-8602

Name of the Vulnerable Software and Affected Versions Simple Email Form versions 1.8.5 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the mod simpleemailform field2 1 parameter to "index.php". Recommendations For Simple...