description: Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.
problem types: Cross-site scripting
affected:
{
product: OneThird CMS
vendor: SpiQe Software
versions:
status: affected, version: v1.73 Heaven's Door and earlier
}