• info
• discussion
• exploit
• solution
• references

Gastebuch Cross-Site Scripting Vulnerability

An exploit is not required.

The following proof of concept was provided:

http://www.example.com/"<script>alert(123)</script>"