CVE-2011-4333

LabWiki 1.1 and earlier contains cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The issue is triggered via the (1) from parameter to index.php and (2) page_no parameter to recentchanges.php. The linked sources (NVD/NVD mirrors and CN...