Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in…
Priority LOW 22CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Why it matters now
EPSS 0.0118 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:*:*:*:*:*:*:*:* | up to 0.20130926 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110401:*:*:*:*:*:*:* | 0.20110401 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110420:*:*:*:*:*:*:* | 0.20110420 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110424:*:*:*:*:*:*:* | 0.20110424 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110515:*:*:*:*:*:*:* | 0.20110515 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110608:*:*:*:*:*:*:* | 0.20110608 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110926:*:*:*:*:*:*:* | 0.20110926 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20111005:*:*:*:*:*:*:* | 0.20111005 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20120125:*:*:*:*:*:*:* | 0.20120125 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20120131:*:*:*:*:*:*:* | 0.20120131 | Vulnerable | Ikiwiki Hosting Project |
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:*:*:*:*:*:*:*:* Versions up to 0.20130926 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110401:*:*:*:*:*:*:* Versions 0.20110401 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110420:*:*:*:*:*:*:* Versions 0.20110420 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110424:*:*:*:*:*:*:* Versions 0.20110424 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110515:*:*:*:*:*:*:* Versions 0.20110515 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110608:*:*:*:*:*:*:* Versions 0.20110608 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20110926:*:*:*:*:*:*:* Versions 0.20110926 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20111005:*:*:*:*:*:*:* Versions 0.20111005 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20120125:*:*:*:*:*:*:* Versions 0.20120125 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20120131:*:*:*:*:*:*:* Versions 0.20120131 Vulnerable ·Ikiwiki Hosting Project
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20120425:*:*:*:*:*:*:* | 0.20120425 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20120526:*:*:*:*:*:*:* | 0.20120526 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20120527:*:*:*:*:*:*:* | 0.20120527 | Vulnerable | Ikiwiki Hosting Project |
| cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20130504:*:*:*:*:*:*:* | 0.20130504 | Vulnerable | Ikiwiki Hosting Project |
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20120425:*:*:*:*:*:*:* Versions 0.20120425 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20120526:*:*:*:*:*:*:* Versions 0.20120526 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20120527:*:*:*:*:*:*:* Versions 0.20120527 Vulnerable ·Ikiwiki Hosting Project
- cpe:2.3:a:ikiwiki_hosting_project:ikiwiki_hosting:0.20130504:*:*:*:*:*:*:* Versions 0.20130504 Vulnerable ·Ikiwiki Hosting Project
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2013-6047
- 2026-10-03 Alias added: GHSA-m3c8-3887-j763
References
Sources
- CVE-2013-6047 · CVE Program
- CVE-2013-6047 · NVD
- FIRST EPSS
- GHSA-m3c8-3887-j763 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences