CVE-2012-5102
Cross-site scripting (XSS) vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote attackers to inject arbitrary web script or HTML via the ext parameter.
Date published : 2012-09-23
http://www.securityfocus.com/bid/51293
http://archives.neohapsis.com/archives/bugtraq/2012-01/0034.html