CVE-2011-5303

CVE-2011-5303 affects Spitfire CMS 1.0.436 with a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the cms_username cookie. Root cause: XSS in handling the cms_username parameter. The connected records corroborate the vulnerability across mul...