Hello, world

Input passed to multiple parameters in index.php isn't properly
sanitised before being returned to the user. This can be exploited to
execute HTML and script code in a user's browser session in context of
an affected site with limitation of ' and ".
This may also affect prior versions.

Examples:
http://[host]/index.php?mode=players...)%3C/script%3E
http://[host]/index.php?mode=weaponi...pt%3E&game=tfc
http://[host]/index.php?mode=search&...pt%3E&game=tfc
http://[host]/index.php?mode=actioni...pt%3E&game=tfc
http://[host]/index.php?mode=mapinfo...pt%3E&game=tfc

(instead of 'tfc' you should use the game, HLstats is configurated for)

kind regards
MC.Iglo