Total vulnerabilities in the database
Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities.
CVSS v2:
No CWE or OWASP classifications available.