CVE-2009-3194

Cross-site scripting (XSS) vulnerability identified as CVE-2009-3194 affects the JCE-Tech SearchFeed Script’s index.php. The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter. Public references in the NVD entry indicate an XSS with a base score of 4.3 (...