CVE-2009-3601

CVE-2009-3601 is an XSS vulnerability in Scriptsez Ultimate Poll, specifically in demo_page.php where the clr parameter in a vote action can be exploited to inject arbitrary script or HTML. The NVD entry documents a medium base score (CVSS2 4.3) with network attack vector and no confidentiality i...