Cross-site scripting (XSS) vulnerability in GNB DesignForm before 3.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the email form.Referenceshttp://www.gnbnet.com/cgi/readme/designform.htmlhttp://www.securityfocus.com/bid/28471http://secunia.com/advisories/29528https://exchange.xforce.ibmcloud.com/vulnerabilities/41495http://jvn.jp/jp/JVN%2358803701/index.html