CVE-2009-4715

CVE-2009-4715 describes a cross-site scripting (XSS) vulnerability in rates.php of Real Time Currency Exchange, exploitable via the Amount parameter to inject arbitrary scripts/HTML. The issue is associated with user-supplied input not being properly sanitized, enabling script execution in a vict...