Threats tagged 'ghsa-pmxg-rhpp-cm63'

Cairo-dock Glx-Dock 3.4.0 contains a cross-site scripting (XSS) vulnerability in the href Attribute Handler of the bg_forum.php file. The flaw is triggered by manipulation of the 'f' argument, allowing remote attackers to execute script code. Exploit code for this vulnerability has been published. The vendor was contacted but did not respond, and no patch information is available.