Description
A cross-site scripting (XSS) vulnerability exists in EasyBookMarker through the "rs" parameter. The parameter value is included in the HTML response without proper encoding.
Impact
An attacker can inject malicious JavaScript code that executes when other users view the affected page, enabling cookie theft and session hijacking.
Solution
Apply HTML output encoding to the rs parameter. Validate and sanitize all user input.