• info
• discussion
• exploit
• solution
• references

CityPost PHP Image Editor M2 URI Parameter Cross-Site Scripting Vulnerability

The following example is available:
http://www.example.com/image-editor-52/?m1=[XSS]&m2=[XSS]&m3=[XSS]&imgsrc=[XSS]&m4=[XSS]