CVE-2011-2672

MEDIUM 4.3CVE-2011-2672 · Published 20/09/2011 · updated 16/06/2026

In short

CVE-2011-2672 is a MEDIUM (CVSS 4.3) vulnerability affecting semanticscuttle (christian weiske).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
semanticscuttle christian_weiske	`= 0.85= 0.86= 0.87= 0.88= 0.89= 0.90= 0.91= 0.92= 0.93= 0.94= 0.95= 0.96≤ 0.97`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

jvn.jp/en/jp/JVN28973089/index.html
jvndb.jvn.jp/jvndb/JVNDB-2011-000074
osvdb.org/75585
secunia.com/advisories/46031 · Vendor Advisory
sourceforge.net/projects/semanticscuttle/files/SemanticScuttle/v0.98/SemanticScuttle-0.98.0.zip/download · Patch
securityfocus.com/bid/49661
exchange.xforce.ibmcloud.com/vulnerabilities/69900

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free