1 results (0.004 seconds)

CVSS: 6.1EPSS: 0%CPEs: 14EXPL: 0

25 Feb 2014 — Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Múltiples vulnerabilidades de XSS en la interfaz de creación de sitios en ikiwiki-hosting anterior a 0.20131025 permiten a atacantes remotos inyectar script Web o HTML arbitrarios a través de vectores no especificados. • http://osvdb.org/99012 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •