Ziku

ziku

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Zikula

zikula

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-3352 1Ziku 1Zikula Nov 21, 2024 Nov 19, 2019 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege...Show more Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege could use this flaw to execute arbitrary HTML or web script code in the context of the affected website.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2011-3352

1Ziku

1Zikula

Nov 21, 2024

Nov 19, 2019

N/A· v4

4.8 MEDIUM· v3

3.5 LOW· v2

Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege could use this flaw to execute arbitrary HTML or web script code in the context of the affected website.Show less