Input passed to the “torrent” field of a GET Request is not properly sanitized before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in an users browser session in context of an affected site if a user clicks on a malicious link.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/51131/TorrentFluxstartpop.txt
Source: https://packetstormsecurity.com/files/51131/TorrentFluxstartpop.txt.html