CodoForum Cross-Site Scripting Vulnerability

Codoforum is a free PHP and MySQL based forum software. Stored cross-site scripting vulnerabilities exist in Codoforum version 3.4 at topic comment replies, which stem from the program failing to adequately filter user-submitted input. An attacker can exploit these vulnerabilities to steal...