TI-2009-04083 CVE-2009-4320 · GHSA-pg72-2h6q-pcjrCross-site scripting (XSS) vulnerability in searchform.php in The Next Generation of…Priority LOW 22Cross-site scripting (XSS) vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding (TNG) 7.1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01062 · Published 2009-12-14 · No fix listed CWE-79