Obscure

Name of the Vulnerable Software and Affected Versions: CGI.pm (affected versions not specified) Description: A cross-site scripting (XSS) issue exists due to insufficient input validation in the start form() function of CGI.pm. This allows remote attackers to inject malicious web scripts via a URL that is used as the form's action parameter. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.