CVE-2009-3355

CVE-2009-3355 is a cross-site scripting vulnerability in the Datetopia Buy Dating Site 1.0, specifically in profile.php. The issue arises from unsafely handling the s_r parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected software and component: Datetopia Buy Dati...