Cross site scripting

Cross-site scripting XSS vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php...

CVE-2013-6808

Cross-site scripting XSS vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php...

PT-2013-6120

Name of the Vulnerable Software and Affected Versions ZendTo versions prior to 4.11-13 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by modifying the emailAddr field in the pickup.php endpoint. Recommendatio...

CVE-2013-6808: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php...