CVE-2011-5019

Textpattern CMS 4.4.1 contains a cross-site scripting (XSS) vulnerability in setup/index.php when the product is incompletely installed. The issue allows an attacker to inject arbitrary script/HTML via the ddb parameter, as described in Trustwave advisory TWSL2012-001 and the CVE record for CVE-2...