[myimei]CuteNews1.4.1~ Add Comment For Protected UserNames~ XSS Attack

Hello Everybody
Software: CuteNews
Sowtware?s Web Site: http://cutephp.com
Versions: 1.4.1
Class: Remote
Status: Unpatched
Exploit: Available
Solution: NotAvailable
Discovered by: imei addmimistrator
Risk Level: Mediume&High
There is a security bug in CuteNews version 1.4.1 that allows malicious people to perform an XSS attack

Full Advisory:
greatz to roozbeh afrasiabi:black_death

Relevant Pages