Keymonkey

The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters. The vulnerable parameters include `first name`, `last name`, `email`, and `username`.