Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient checking in comments.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2011-0428 | third party advisory |
https://ikiwiki.info/security/#index38h2 | third party advisory |