CVE-2010-0699

CVE-2010-0699 is a cross-site scripting (XSS) vulnerability in VideoSearchScript Pro 3.5, affecting index.php where the q parameter can be used to inject arbitrary script/HTML. Exploitation is described as remote and does not require authentication, with user interaction not required. The CVSSv2 ...