Page 4 of 16 results (0.003 seconds)

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

Cross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el htmlscrubber de Ikiwiki antes de 1.1.46 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de los contenidos del título. • http://ikiwiki.info/security/#index27h2 http://secunia.com/advisories/28911 http://secunia.com/advisories/29369 http://www.debian.org/security/2008/dsa-1523 http://www.securityfocus.com/bid/27760 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •