description: Cross-site scripting (XSS) vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter.
problem types: Cross-Site Scripting
affected:
{
product: BoltWire
vendor: BoltWire
versions:
status: affected, version: 3.5 and earlier
}