Cross site scripting

2007-05-0910:19:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

Cross-site scripting (XSS) vulnerability in usersettings.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter.

CPENameOperatorVersion
wikkawikile1.1.6.2

CPE	Name	Operator	Version
	wikkawiki	le	1.1.6.2

References

osvdb.org/35828

secunia.com/advisories/25181

wikkawiki.org/WikkaReleaseNotes

wush.net/trac/wikka/ticket/363

www.securityfocus.com/bid/23894

www.vupen.com/english/advisories/2007/1725