Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <P> tag.Referenceshttp://online.securityfocus.com/archive/1/280255http://www.securityfocus.com/bid/5140https://exchange.xforce.ibmcloud.com/vulnerabilities/9473http://online.securityfocus.com/archive/1/280218