XSS in Phpnuke Php-nuke

CVE-2011-1481

Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sender_name or (2) sender_email parameter in a Feedback action to mod…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.011 (61.2th percentile) — read the EPSS interpretation.

Affected products

Phpnuke Php-nuke — versions 5.0, 5.0.1, 5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

secalert@redhat.com (mailing-list, x_refsource_MLIST, Exploit)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Exploit)
secalert@redhat.com (x_refsource_MISC)