1 results (0.004 seconds)

CVSS: 4.3EPSS: 0%CPEs: 14EXPL: 0

Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Múltiples vulnerabilidades de XSS en la interfaz de creación de sitios en ikiwiki-hosting anterior a 0.20131025 permiten a atacantes remotos inyectar script Web o HTML arbitrarios a través de vectores no especificados. • http://osvdb.org/99012 http://packages.qa.debian.org/i/ikiwiki-hosting/news/20131025T224825Z.html http://seclists.org/oss-sec/2013/q4/180 https://exchange.xforce.ibmcloud.com/vulnerabilities/88334 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •