:A vulnerability has been reported in NetCommons, which can be exploited by malicious people to conduct cross-site scripting attacks.Input passed to unspecified parameters is not properly sanitised before being returned to a user. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of the affected site.The vulnerability is reported in 1.0.X prior to version 1.0.11 and 1.1.X prior to version 1.1.2Solution:Update to version 1.0.11 or 1.1.2.Provided and/or discovered by:EKYUASUKAI Technology Co., Ltd. Hiroshi HukumoriOriginal Advisory:NetCommons:http://www.netcommons.org/modules/jou…1&news_id=316&op=comment#2121JVN:http://jvn.jp/jp/JVN%2379295963/index.html

Original post by Pankaj