Cross-site scripting (XSS) vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-2851 and CVE-2006-3240.
| Software | From | Fixed in |
|---|---|---|
| dotproject / dotproject | 2.1 | 2.1.x |