Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag.
- http://evuln.com/vulns/65/summary.html
- http://securityreason.com/securityalert/447
No PoCs found on GitHub currently.