Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1111
http://www.securityfocus.com/bid/38387