CVE-2013-4433

XHProf contains a Cross-site scripting (XSS) vulnerability affecting versions before 0.9.4, exploitable via the run parameter to inject arbitrary script/HTML. Root cause: insufficient input sanitization in the run parameter. Impact: remote attackers could execute arbitrary scripts in a victim’s b...