What    |Removed                     |Added
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |

--- Comment #6 from 2010-11-01 15:00:04 UTC ---
We've found the same vulnerability in the 'default' input field on the ask
screen. To Replicate:

Go to:

and enter:

'><script>alert("CSS Vulnerability");</script>

in the mainlabel, intro, outro, or default input fields. They all allow the
script to execute when the results are returned.


Configure bugmail:
------- You are receiving this mail because: -------
You are on the CC list for the bug.

Wikibugs-l mailing list

Reply via email to