The companys sites are used for local news services, often by councils and councillors to communicate with residents.
London districts preferred with sites powered by the service include Shepherds Bush, Wimbledon, and Hammersmith.
Tierney says that before publishing his findings overnight, he disclosed the flaws to NeighbourNet two months ago.
Thanks to absence of whitelisting, it also lets untrusted third party content to be inserted into forum posts.
In a correspondence written by NeighbourNET to The Register, says that it was directed to Tierney.
This would close these security holes and others, says the email to Tierney weve been provided.
NeighbourNET also told The Register that the companys site does not include any nasty vulnerabilities that could compromise users.
Our sites have been operating for over a decade without a major issue with security.
source: www.techworm.net