CVE-2012-3232

Name of the Vulnerable Software and Affected Versions web@all versions prior to the version downloaded on May 30, 2012

Description The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the text[title] parameter in the search.php file.

Recommendations For versions prior to the one downloaded on May 30, 2012, consider restricting access to the search.php file until a fix is applied, and avoid using the text[title] parameter in the affected endpoint.