NetSight
IP …
medium4.3

CVE-2013-6168

Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the re…

Impact

Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the returnpage parameter to index.php.

Affected products

VendorProductAffected versions
ZikulaZikula Application Framework
through 1.3.5
Versions 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.4

Weakness classification

CWE-79

References