CVE-2009-1790

CVE-2009-1790 affects Trees from CGI RESCUE (before v2.11). The root cause is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via unspecified parameters. Impact: arbitrary script execution in affected users’ browsers. Affected: Trees v2.10 and earlie...