Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script via the mod parameter.Referenceshttp://archives.neohapsis.com/archives/bugtraq/2003-02/0236.htmlhttp://www.securityfocus.com/bid/6894https://exchange.xforce.ibmcloud.com/vulnerabilities/11371