Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTML via the ara parameter to the default URI under Ara/ in a search action.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/39456http://www.securityfocus.com/bid/27067http://secunia.com/advisories/28262http://www.packetstormsecurity.org/0712-exploits/makale-xss.txt