Cross-site scripting (XSS) vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the rate parameter in a submit rate action.Referenceshttp://secunia.com/advisories/32511http://www.securityfocus.com/bid/32069https://exchange.xforce.ibmcloud.com/vulnerabilities/46202http://holisticinfosec.org/content/view/85/45/