CVEvulnerability

CVE-2013-6047

4.3 MEDIUM Published 2014-02-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-02-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

• ikiwiki hosting project ikiwiki hosting (<= 0.20130926) • ikiwiki hosting project ikiwiki hosting 0.20110401 • ikiwiki hosting project ikiwiki hosting 0.20110420 • ikiwiki hosting project ikiwiki hosting 0.20110424 • ikiwiki hosting project ikiwiki hosting 0.20110515 • ikiwiki hosting project ikiwiki hosting 0.20110608 • ikiwiki hosting project ikiwiki hosting 0.20110926 • ikiwiki hosting project ikiwiki hosting 0.20111005 • ikiwiki hosting project ikiwiki hosting 0.20120125 • ikiwiki hosting project ikiwiki hosting 0.20120131 • ikiwiki hosting project ikiwiki hosting 0.20120425 • ikiwiki hosting project ikiwiki hosting 0.20120526 • ikiwiki hosting project ikiwiki hosting 0.20120527 • ikiwiki hosting project ikiwiki hosting 0.20130504

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References