Ticket #4244 (closed Bug: fixed)
XSS in FCKeditor/trunk/_testcases/sampleposteddata.asp
| Reported by: | stonedyak | Owned by: | |
|---|---|---|---|
| Priority: | Normal | Milestone: | FCKeditor 2.6.5 |
| Component: | Server : ASP | Version: | |
| Keywords: | Cc: |
Description
The sForm variable is outputted unescaped, allowing XSS. The versions of sampleposteddata.asp in the samples directory were updated a few weeks ago, but it looks like this one was missed
Change History
Note: See
TracTickets for help on using
tickets.
