Cross site scripting

Cross-site scripting XSS vulnerability in Homepage Decorator PerlMailer 3.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3897

CVE-2014-3897 refers to a cross-site scripting (XSS) vulnerability in PerlMailer (Homepage Decorator) CGI scripts, affecting PerlMailer 3.10 and earlier. The flaw allows an arbitrary script to run in a user’s browser via unspecified vectors. Affected component: PerlMailer CGI used to send mail fr...