CVE-2016-4561 PUBLISHED

Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message.

EPSS 0.30% · 52.8th percentile

Risk Scores

EPSS Score
0.30%
52.8th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSikiwiki0, 3.20150614, 3.20160121

Timeline

References

Open in Interactive Console →