| Package | Affected versions | Patched versions |
|---|---|---|
| wikyblog | = 1.2.1= 1.2.2= 1.2.3= 1.3.2= 1.4= 1.4.1= 1.4.10= 1.4.11= 1.4.12= 1.4.13= 1.4.14= 1.4.15= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 1.5= 1.5.0.2= 1.5.0.3= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.7.2= 1.5.7.3= 1.5.7.4= 1.6= 1.6.1= 1.6.1.1= 1.6.1.2= 1.6.1.3= 1.6.1.4= 1.6.1.5= 1.6.1.6= 1.6.1.7= 1.6b1= 1.6b2= 1.6b3= 1.7= 1.7.0.1= 1.7.1= 1.7.1.1= 1.7.1b1= 1.7.1b2= 1.7b1= 1.7b2= 1.7b3≤ 1.7 |
Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to index.php/Special/Main/keywordSearch, (2) revNum parameter to index.php/Edit/Main/Home, (3) to parameter to index.php/Special/Main/WhatLinksHere, (4) user parameter to index.php/Special/Main/UserEdits, and (5) the PATH_INFO to index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free