Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email_address, (3) password, (4) password_verify, (5) firstname, (6) lastname, or (7) verification_code parameter to users/action/register. NOTE: some of these details are obtained from third party information.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2012-07-03T22:00:00Z

Updated: 2024-09-16T19:10:56.873Z

Reserved: 2012-07-03T00:00:00Z

Link: CVE-2012-3837

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-07-03T22:55:02.817

Modified: 2024-11-21T01:41:43.590

Link: CVE-2012-3837

cve-icon Redhat

No data.