CVE-2011-4709 | Hotaru CMS 1.4.2 Search Plugin Hotaru.php SITE_NAME cross site scripting (EDB-36307 / XFDB-71302)

A vulnerability classified as problematic has been found in Hotaru CMS 1.4.2. Affected is an unknown function of the file Hotaru.php of the component Search Plugin. The manipulation of the argument SITE_NAME leads to cross site scripting. This vulnerability is traded as CVE-2011-4709. It is possible to launch the attack remotely. Furthermore, there is an exploit available.