Read the docs

Ziku

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ziku records in CISA KEV

No Ziku vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

TI-2011-02962 CVE-2011-3352 · GHSA-9px3-cw6w-6qq7

Cross-site scripting in Zikula

Priority LOW 24

Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00815 Published 2019-11-19 No fix listed CWE-79
Open these records in search →