Multiple cross-site scripting (XSS) vulnerabilities in (1) link_edited.php and (2) link_added.php in Hinton Design phpht Topsites 1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
http://www.securityfocus.com/bid/16562
http://www.securityfocus.com/archive/1/424741/100/0/threaded