medium4.3
CVE-2011-5159
Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML v…
Impact
Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the sub_group parameter, a different vulnerability than CVE-2011-4942.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geeklog | Geeklog | through 1.7.1 Versions 1.3, 1.3.5, 1.3.6, 1.3.7, 1.3.8 |