CVE-2007-3330

Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web script or HTML via a news post, which is stored in news/ without sanitization.

Date published : 2007-06-21

http://www.securityfocus.com/bid/24512

http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/064051.html