CVE:CVE-2007-1768
CNNVD:CNNVD-200703-685
Mephisto 0.7.3和Mephisto Edge 20070325的app/helpers/application_helper.rb中存在跨站脚本攻击漏洞。远程攻击者可以借助评论中的作者名字段，注入任意的web脚本或HTML。
solution:Upgrade mephisto mephisto to a higher version than 0.7.3,and avoid the version 0.7.3; Upgrade mephisto mephisto_edge to a higher version than 2007-03-25,and avoid the version 2007-03-25