VWE-2013-0012 Viewing Source [template]Vulnerability | cve= | aka=Identity Theft Vulnerability | severity=High | difficulty=Hard | description=HTML/Javascript injection | discover-date=April 7, 2013 | patch-date=April 8, 2013 | patches=4.0.0 Alpha 5 | workaround=Update all areas so that HTML is not allowed in comments. [/template] 313 characters