Maian Recipe Cross-Site Scripting Vulnerabilities

May 9, 2008·1 minute readmediummaian xss cross-site-scripting php

Affected: Maian Recipe

Description

Multiple cross-site scripting (XSS) vulnerabilities exist in Maian Recipe. User input is reflected in HTML pages without proper encoding.

Attackers can inject malicious JavaScript to steal session cookies and hijack user or administrator accounts.

Upgrade to the latest version of Maian Recipe. Apply output encoding to all user-supplied data.