CVE-2011-0911
EUVD-2011-092308.02.2011, 22:00
Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is possible that this overlaps CVE-2011-0535.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| zikula | zikula_application_framework | 𝑥 ≤ 1.2.4 |
| zikula | zikula_application_framework | 1.1.2 |
| zikula | zikula_application_framework | 1.2.1 |
| zikula | zikula_application_framework | 1.2.2 |
| zikula | zikula_application_framework | 1.2.3 |
𝑥
= Vulnerable software versions