Filtered by vendor Ziku
Subscriptions
Filtered by product Zikula
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2011-3352 | 1 Ziku | 1 Zikula | 2024-11-21 | 4.8 Medium |
| Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege could use this flaw to execute arbitrary HTML or web script code in the context of the affected website. | ||||
Page 1 of 1.