CVE-2012-1898

CVE-2012-1898 affects Wolf CMS 0.75 and earlier, with multiple XSS vulnerabilities in the admin/user/add path that allow remote attackers to inject arbitrary script or HTML via user[name], user[email], or user[username]. Root cause is improper handling of user input in the add user form, enabling...