Description

Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2010-4748

Related Vulnerabilities

Oracle JRE CVE-2017-10355 Vulnerability (CVE-2017-10355)

WordPress Plugin VikBooking Hotel Booking Engine & PMS Multiple Cross-Site Request Forgery Vulnerabilities (1.5.12)

WordPress Cross-Site Request Forgery (0.70 - 3.6.1)

WordPress Plugin Web Application Firewall-website security Unspecified Vulnerability (2.1.2)

WordPress Plugin Newspack Blocks Arbitrary File Upload (3.0.8)

Severity

Medium

Classification

CVE-2010-4748 CWE-707

Tags

Missing Update Known Vulnerabilities