Cross-site scripting (XSS) vulnerability in journal.php in SparkleBlog 2.1 allows remote attackers to inject arbitrary web script or HTML via the name field.Referenceshttp://www.securityfocus.com/bid/15202http://marc.info/?l=bugtraq&m=113029164931570&w=2http://securityreason.com/securityalert/118
