Cross-Site Scripting Vulnerability in DokuWiki's RSS Feature
CVE-2011-2510

Currently unrated

Key Information:

Vendor

Dokuwiki

Status
Dokuwiki
Vendor
CVE Published:
14 July 2011

What is CVE-2011-2510?

A Cross-Site Scripting (XSS) vulnerability exists in the RSS embedding feature of DokuWiki prior to the 2011-05-25a Rincewind version. This flaw permits remote attackers to inject arbitrary web scripts or HTML into web pages displayed by users. Attackers can exploit this vulnerability through malicious links, potentially compromising user sessions and delivering harmful content.

References

http://www.securityfocus.com/bid/48364
vdb-entryx_refsource_BID
http://lists.fedoraproject.org/pipermail/package-announce...
vendor-advisoryx_refsource_FEDORA
https://exchange.xforce.ibmcloud.com/vulnerabilities/68122
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.