html. The manipulation in the argument contact_name leads to cross web site scripting. The attack may be released remotely. The exploit has become disclosed to the general public and could be used. This makes it probable in certain situations that both the perform and its caller get in touch with freeaddrinfo() for a similar allocated memory block