CVE-2011-1401 - CVE House
Back to Database
Status published Low CVE-2011-1401

ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin...

Vulnerability Description

ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences in (1) the default stylesheet or (2) an alternate stylesheet.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-1401

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

ikiwiki
Vulnerable Versions:
0, 1.0, 1.1, 1.1.47, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29, 1.30, 1.31, 1.32, 1.33.3, 1.34, 1.34.1, 1.34.2, 1.35, 1.36, 1.37, 1.38, 1.39, 1.40, 1.41, 1.42, 1.43, 1.44, 1.45, 1.46, 1.47, 1.48, 1.49, 1.50, 1.51, 2.0, 2.00, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.6.1, 2.7, 2.8, 2.9, 2.10, 2.11, 2.12, 2.13, 2.14, 2.15, 2.16, 2.17, 2.18, 2.19, 2.20, 2.30, 2.31, 2.31.1, 2.31.2, 2.31.3, 2.40, 2.41, 2.42, 2.43, 2.44, 2.45, 2.46, 2.47, 2.48, 2.49, 2.50, 2.51, 2.52, 2.53, 2.54, 2.55, 2.56, 2.60, 2.61, 2.62, 2.62.1, 2.63, 2.64, 2.65, 2.66, 2.67, 2.68, 2.69, 2.70, 2.71, 2.72, 3.0, 3.00, 3.01, 3.02, 3.03, 3.04, 3.05, 3.06, 3.07, 3.08, 3.09, 3.10, 3.11, 3.12, 3.13, 3.14, 3.141, 3.1415, 3.14159, 3.141592, 3.1415926, 3.14159265, 3.20091009, 3.20091017, 3.20091022, 3.20091023, 3.20091031, 3.20091113, 3.20091202, 3.20091218, 3.20100102.3, 3.20100122, 3.20100212, 3.20100302, 3.20100312, 3.20100403, 3.20100427, 3.20100501, 3.20100504, 3.20100515, 3.20100518, 3.20100518.2, 3.20100610, 3.20100623, 3.20100722, 3.20100804, 3.20100815, 3.20100831, 3.20100926, 3.20101019, 3.20101023, 3.20101112, 3.20101129, 3.20101201, 3.20101231, 3.20110105, 3.20110123, 3.20110124, 3.20110225

Timeline

Official Publish: April 11th, 2011
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.