A vulnerability has been reported in Trac, which can be exploited by malicious people to conduct cross-site scripting attacks.

The vulnerability is caused due to an error within the "download wiki page as text" function, which can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Successful exploitation may require that the victim uses Internet Explorer.

The vulnerability is reported in versions prior to 0.10.3.1.

Solution
Update to version 0.10.3.1.

Provided and/or discovered by
The vendor credits Yoshinori Oota, Business Architects Inc

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://trac.edgewall.org/wiki/ChangeLog#a0.10.3.1

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers