CVE-2008-1630: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to 1 page/showcirculation.php; and 2 edittemplatestep2.php, 3 showfields.php, 4 showuser.php, 5 editmailingliststep1.php, and 6...