Cross site scripting

2017-10-2318:29:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) from parameter to index.php or the (2) page_no parameter to recentchanges.php.

CPENameOperatorVersion
labwikile1.1

CPE	Name	Operator	Version
	labwiki	le	1.1

References

www.openwall.com/lists/oss-security/2011/11/21/16

www.openwall.com/lists/oss-security/2014/02/08/5