Multiple cross-site scripting vulnerabilities in LabWiki

LabWiki is a meme plugin. Multiple cross-site scripting vulnerabilities exist in LabWiki 1.1 and earlier versions. A remote attacker can exploit this vulnerability by sending the 'from' parameter to the index.php file or the 'pageno' parameter to the recentchanges.php file to inject arbitrary web...

PT-2017-5001

Name of the Vulnerable Software and Affected Versions: LabWiki versions 1.1 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the from parameter to "index.php" or the page no parameter to "recentchanges.php". Recommendation...