CVE-2012-4267

CVE-2012-4267 describes a stored/persistent XSS in Sockso’s user/register endpoint for Sockso 1.5 and earlier, where an attacker can inject arbitrary script or HTML via the name parameter. The affected component is the registration flow (user/register) in Sockso prior to version 1.6, with the roo...