TI-2008-00655 CVE-2008-0687 · GHSA-8vf9-wm7f-wh7mCross-site scripting (XSS) vulnerability in…Priority LOW 36Cross-site scripting (XSS) vulnerability in siteadmin/editor_files/includes/load_message.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the lang[please_wait] parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01386 · Published 2008-02-12 · No fix listed CWE-94