Multiple cross-site scripting (XSS) vulnerabilities in error.php in Gijza.net Error Manager 2.1 for PHP-Nuke 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) pagetitle or (2) error parameters, or (3) certain parameters in the error log.
| Software | From | Fixed in |
|---|---|---|
| error_manager / php-nuke_module | 2.1 | 2.1.x |