system
Describe <CVE-2016-10508>.
user
What is <CVE-2016-10508>?
assistant
Multiple cross-site scripting (XSS) vulnerabilities in phpThumb() before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php..