CVE-2011-5303
Description
Cross-site scripting (XSS) vulnerability in Spitfire CMS 1.0.436 allows remote attackers to inject arbitrary web script or HTML via a cms_username cookie.
- CVSS Version 2.0
nvd
CVE ID: CVE-2011-5303
Base Score: 4.3
Base Severity: MEDIUM
Vector String:AV:N/AC:M/Au:N/C:N/I:P/A:N
Refrence: NVD