Hello,

I have discovered a XSS vunerability in the Contensis

CMS. 


Input passed to the "search" parameter when performing

a search and various fields when using the search isn't properly sanitised ...


The vendors own site was tested in Windows Internet Explorer - the search 
funstion did not work at all in my versions of Safari or Firefox:

http://www.contensis.net


Code example: <script>alert('hello world');</script>



thanks

smigoftheDump

Reply via email to