PT-2015-5039

Name of the Vulnerable Software and Affected Versions PHPKIT version 1.6.6 Build 160014 Description A cross-site scripting XSS issue exists in the poll archive of PHPKIT, allowing remote attackers to inject arbitrary web script or HTML via the result parameter to "upload files/pk/include.php"...