Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to 1 index.php or 2 the default URI...