Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrary web script or HTML via the (1) m (2) s (3) ID or (4) t parameters or the (5) field name (6) Your Web field or (7) email field in the comments section.