CVE-2014-125031

TekNet (kirill2485) contains a cross-site scripting flaw in an unknown function of pages/loggedin.php via the statusentery parameter. Exploitation is possible remotely. A patch is available: 1c575340539f983333aa43fc58ecd76eb53e1816. Apply the patch or restrict access to pages/loggedin.php until r...