Description

Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2010-4748

Related Vulnerabilities

WordPress Plugin Otter-Gutenberg Blocks-Page Builder for Gutenberg Editor & FSE PHAR Deserialization (2.2.5)

WordPress Plugin Gallery Objects SQL Injection (0.4)

WebLogic CVE-2016-3499 Vulnerability (CVE-2016-3499)

Grafana Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-13379)

WordPress Plugin Qode Twitter Feed (embeded in Bridge-Creative Multi-Purpose WordPress Theme) Open Redirect (2.0.1)

Severity

Medium

Classification

CVE-2010-4748 CWE-707

Tags

Missing Update Known Vulnerabilities