Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to inject arbitrary web script or HTML via the userfield parameter.
| Software | From | Fixed in |
|---|---|---|
| slashcode.com / slash | - | r_2_5_0_94.x |