NuytsTech Security

CVE-2015-2793

by ·

Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openid_identifier parameter in a verify action to ikiwiki.cgi.

Date published : 2019-11-21

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157001.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157023.html

Tags: