CVE-2011-5267

MITTEL 4.3CVE-2011-5267 · Published 05/11/2013 · updated 16/06/2026

Kurz gesagt

CVE-2011-5267 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in wikiwig (wikiwig project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.7%, höher als bei 77.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
wikiwig wikiwig_project	`= 5.0.1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) to_p_dict or (2) to_r_list parameter. NOTE: this issue might be related to the htmlarea plugin and CVE-2013-5670.

References

autosectools.com/Advisories/WikiWig.5.01_Persistent-Reflected.Cross-site.Scripting_139.html · Exploit
exploit-db.com/exploits/16988 · Exploit
openwall.com/lists/oss-security/2013/09/01/1 · Patch
openwall.com/lists/oss-security/2013/09/01/3 · Patch
osvdb.org/71070

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free