Mayuresh Dani

Thanks for mentioning us. :-)

Okay. Would have really appreciated if you guys could have atleast mentioned us for reporting these vulnerabilities when releasing patches though. :-)

Any updates about the vulnerability in user profiles?

Also a logged-in user can launch a similar attack simply by entering malicious java script into the "First Name" and "Last Name" fields on http://localhost/expo...

Hi,

We found a universal cross-site scripting while testing Exponent CMS versions prior to 2.3.1. It can be verified by visiting -
http://www.exponentcms.org/n...