CVE-2011-5267

Wikiwig - XSS

Title source: rule
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) to_p_dict or (2) to_r_list parameter. NOTE: this issue might be related to the htmlarea plugin and CVE-2013-5670.

Exploits (2)

exploitdb WRITEUP VERIFIED
by John Leitch · textwebappsphp
https://www.exploit-db.com/exploits/35436
exploitdb WORKING POC
by AutoSec Tools · textwebappsphp
https://www.exploit-db.com/exploits/16988

References (5)

Core 5
Core References
Patch mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/09/01/3
Patch mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/09/01/1
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/16988
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/71070

Scores

EPSS 0.0993
EPSS Percentile 93.0%

Details

CWE
CWE-79
Status published
Products (1)
wikiwig_project/wikiwig 5.0.1
Published Nov 05, 2013
Tracked Since Feb 18, 2026