Cross-site scripting (XSS) vulnerability in DirectTopics 2.1 and 2.2 allows remote attackers to inject arbitrary web script via a javascript: URL in (1) a thread or (2) an IMG tag.
- http://marc.info/?l=bugtraq&m=111592417803514&w=2
No PoCs found on GitHub currently.