CVE-2009-2589

CVE-2009-2589 involves multiple cross-site scripting (XSS) vulnerabilities in the Hutscripts PHP Website Script . The issue allows remote attackers to inject arbitrary web script or HTML via the msg parameter to three pages: feedback.php , index.php , and lostpassword.php . The NVD entry lists a ...