CVE-2004-2346

CVE-2004-2346 affects Forum Web Server 1.6 and earlier, with two XSS vectors: (1) Subject field in post1.htm and (2) File Description field in postfile2.htm. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Documents describe the issue but do not provide mitigatio...