CVE-2012-1899

Published: Sep 17, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name, (2) Last name or (3) Email (required) fields.

Affected (13)

Products: Nikola Posa: Webfoliocms

Nikola Posa

1 product

Webfoliocms

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Nikola Posa Webfoliocms	Version 1.0.2
Nikola Posa Webfoliocms	Version 1.0.3
Nikola Posa Webfoliocms	Version 1.0.4
Nikola Posa Webfoliocms	Version 1.0.5
Nikola Posa Webfoliocms	Version 1.0.6
Nikola Posa Webfoliocms	Version 1.0.7
Nikola Posa Webfoliocms	Version 1.0.8
Nikola Posa Webfoliocms	Version 1.0.9
Nikola Posa Webfoliocms	Version 1.1.0
Nikola Posa Webfoliocms	Version 1.1.1
Nikola Posa Webfoliocms	Version 1.1.2
Nikola Posa Webfoliocms	Version 1.1.3
Nikola Posa Webfoliocms	Version 1.1.4