CVE-2012-6556

CVE-2012-6556 describes multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums. The issue enables remote attackers to inject arbitrary web script or HTML via the (1) User/FirstName or (2) User/LastName parameter on the edit user page. The NVD ent...