CVE:CVE-2012-3476
CNNVD:CNNVD-201208-133
Ushahidi Platform 2.5之前版本中(1)application/views/admin/layout.php和(2)themes/default/views/header.php中存在多个跨站脚本（XSS）漏洞。远程攻击者可利用该漏洞通过相关站点名称的向量注入任意web脚本或HTML。
solution:Upgrade ushahidi ushahidi_platform to a higher version than 2.4.1,1.0,1.2,2.0,2.1,2.2,2.2.1,2.3.1,2.3.2,2.4,and avoid the version (,2.4.1],1.0,1.2,2.0,2.1,2.2,2.2.1,2.3.1,2.3.2,2.4