A cross site scripting vulnerability has been discovered in Phorum 3.4.3. The problem occurs due to insufficient sanitization of user-supplied URI parameters to the login.php script. As a result, it may be possible to execute arbitrary script code within the browser of a target user who follows a maliciously constructed link.
A cross site scripting vulnerability has been discovered in Phorum 3.4.3. The problem occurs due to insufficient sanitization of user-supplied URI parameters to the login.php script. As a result, it may be possible to execute arbitrary script code within the browser of a target user who follows a maliciously constructed link.