VDB
DEBIAN-CVE-2011-1401
DEBIAN-CVE-2011-1401
PUBLISHED
CVSS 8.5 HIGH
Record from OSV · Published April 11, 2011
ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences in (1) the default stylesheet or (2) an alternate stylesheet.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| ikiwiki | Debian:14 | 3.20110328 |
| ikiwiki | Debian:12 | 3.20110328 |
| ikiwiki | Debian:13 | 3.20110328 |
Risk scores
CVSS 4.0
8.5
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | ikiwiki | 0 |
| Debian:12 | ikiwiki | 0 |
| Debian:13 | ikiwiki | 0 |
Timeline
- Apr 11, 2011 CVE Published
- Oct 23, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln DEBIAN-CVE-2011-1401
vulnetix vdb fixes DEBIAN-CVE-2011-1401Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2011-1401/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart