Zoomblog is prone to HTML injection attacks which can allow for cross site scripting attacks. Exploitation details provided.