PHP-Nuke 'reviews' module is prone to a cross-site scripting vulnerability. This issue could allow an attacker to steal cookie-based authentication credentials. An attacker can exploit this issue by creating a malicious link containing HTML and script code. The attacker sends this link to a vulnerable user. When the user follows the link, HTML and script renders in the user's browser.
PHP-Nuke 'reviews' module is prone to a cross-site scripting vulnerability. This issue could allow an attacker to steal cookie-based authentication credentials. An attacker can exploit this issue by creating a malicious link containing HTML and script code. The attacker sends this link to a vulnerable user. When the user follows the link, HTML and script renders in the user's browser.