CVE-2011-3352

Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting…

published November 19, 2019

CVSS
—
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege could use this flaw to execute arbitrary HTML or web script code in the context of the affected website.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00815 · 56.4th percentile
Published
2019-11-19T22:37Z
EPSS history
Timeline
  • 19 NOV 22:37Z
    Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting…
    cvelistv5