CVE-2012-1782

Multiple cross-site scripting XSS vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the 1 url bar or 2 picture bar...