Description
A cross-site scripting (XSS) vulnerability exists in Maian Guestbook through the footer.php script. User input is not properly sanitized before being included in the page output.
Impact
Attackers can inject malicious JavaScript into guestbook entries that executes when other visitors view the page, enabling cookie theft and session hijacking.
Solution
Upgrade to the latest version of Maian Guestbook. Apply HTML output encoding.