CVE-2011-0428 Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient checking in comments.
MediumCVSS 6.1
EPSS 0.84%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient checking in comments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ikiwiki(Debian:12) | < 3.20110122 | 3.20110122 |
| debian/ikiwiki(Debian:13) | < 3.20110122 | 3.20110122 |
| debian/ikiwiki(Debian:14) | < 3.20110122 | 3.20110122 |
| ikiwiki | < 3.20110122 | 3.20110122 |
References
- Debian Security Tracker CVE-2011-0428 third-party-advisory vendor-advisory
- ikiwiki.info third-party-advisory