Cross site scripting

2021-02-0122:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

39.4%

JSON

A cross-site scripting (XSS) vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php.

CPENameOperatorVersion
wikindxlt5.7.0
wikindxge6.0.0
wikindxle6.4.0

Name	Operator	Version
wikindx	lt	5.7.0
wikindx	ge	6.0.0
wikindx	le	6.4.0

References

sourceforge.net/p/wikindx/news/2021/01/wikindx-v641-released/

sourceforge.net/projects/wikindx/

0.001 Low

EPSS

Percentile

39.4%

JSON

Related for PRION:CVE-2021-3340