CVE:CVE-2007-0119
CNNVD:CNNVD-200701-052
EditTag 1.2版本中存在多个跨站攻击漏洞。远程攻击者可以借助提交到(1)mkpw_mp.cgi,(2)mkpw.pl或(3)mkpw.cgi的plain参数，注入任意的web脚本或HTML。
solution:Upgrade edittag edittag to a higher version than 1.2,and avoid the version 1.2