CVE-2011-4572

CVE-2011-4572: A cross-site scripting (XSS) vulnerability exists in inc/tesmodrewite.php of CF Image Hosting Script versions 1.3.82 and 1.4.1 (and likely earlier versions before 1.4.2). The issue allows remote attackers to inject arbitrary JavaScript/HTML via the q parameter. The entry notes this...