CVE-2012-3840

CVE-2012-3840 documents multiple XSS vulnerabilities in MyClientBase 0.12, exploitable via index.php/users/form/user_id using the first_name or last_name parameters. The affected component is the user form handling; the root cause is input handling allowing script/HTML injection. Reported across ...