<A HREF="http://www.eweek.com/article2/0,1895,2031742,00.asp?kc=EWEAUEMNL101706EOAD">Multiple security flaws in Bugzilla</A> could put users of the software defect tracking software at risk of cross-site scripting, data manipulation and data exposure attacks. According to a warning from the open-source Bugzilla project, users should immediately upgrade to versions 2.18.6, 2.20.3, 2.22.1 or 2.23.3 to minimize the risk of malicious attacks. Security alerts aggregator Secunia rates the vulnerabilities as "moderately critical." The most serious vulnerability occurs because Bugzilla does not properly sanitize various fields when embedded in certain HTML headline tags.