medium6.1
CVE-2019-13588
A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web…
Impact
A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web script or HTML via the PagingStart parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wikindx Project | Wikindx | through 5.8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://sourceforge.net/p/wikindx/code/2794/
- https://sourceforge.net/p/wikindx/code/2801/tree//wikindx/trunk/CHANGELOG.txt?diff=51060a0c271846770c56c75a:2800
- https://sourceforge.net/p/wikindx/code/commit_browser
- https://sourceforge.net/p/wikindx/code/2794/
- https://sourceforge.net/p/wikindx/code/2801/tree//wikindx/trunk/CHANGELOG.txt?diff=51060a0c271846770c56c75a:2800
- https://sourceforge.net/p/wikindx/code/commit_browser