CVE-2011-5185 Cross-site scripting (XSS) vulnerability in video_comments.php in Online Subtitles Workshop before 2.0 rev 131 allows remote attackers to inject arbitrary web script or HTML via the comment parameter.
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in video_comments.php in Online Subtitles Workshop before 2.0 rev 131 allows remote attackers to inject arbitrary web script or HTML via the comment parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realmatrix online subtitles workshop | <= 2.0 | No fix listed |
References
- onlinesubtitles.svn.sourceforge.net patch
- 18035 exploit