CVE-2004-2484

PHP Gift Registry 1.3.5 and earlier contain a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the message parameter to event.php or index.php. The description indicates the vulnerability is triggered through user-supplied input in t...