Description There is a possible reflected Cross-Site Scripting attack. An attacker able to cause a user to follow a specially crafted malicious link may be able to recover session identifiers or exploit browser vulnerabilities. The template parameter is vulnerable, as can be seen by navigating to a URL: http://<site>/NonExistantUser?action=edit&template=<script>alert(document.cookie);</script> Steps to reproduce 1. navigate to a URL of the form: http://<site>/NonExistantUser?action=edit&template=<script>alert(document.cookie);</script> Example URL: http://<site>/NonExistantUser?action=edit&template=<script>alert(document.cookie);</script> Component selection * add_msg expects correctly escaped input, but it isn't done at all places