CVE-2009-3195

CVE-2009-3195 affects JCE-Tech Auction RSS Content Script 3.0 with multiple XSS vulnerabilities that allow remote injection of arbitrary script/HTML via the id parameter to rss.php and search.php. The description specifies client-side impact (arbitrary script injection) but does not provide in-do...