XSS in Dokuwiki

CVE-2011-2510

Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki before 2011-05-25a Rincewind allows remote attackers to inject arbitrary web script or HTML via a link.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.017 (75.5th percentile) — read the EPSS interpretation.

Affected products

  • Dokuwiki — versions 2005-07-01, 2005-07-13, 2005-09-19
  • N/a — versions n/a

Weakness classification (CWE)

References