CVE-2019-13588 - A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web script or HTML via the PagingStart parameter

Back Back to CVE browser

MEDIUM

A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web script or HTML via the PagingStart parameter

Published Jul 26, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 1.04%

Description

A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web script or HTML via the PagingStart parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5036
Advisory
https://sourceforge.net/p/wikindx/code/2794/
x_refsource_CONFIRMPatchThird Party Advisory
https://sourceforge.net/p/wikindx/code/2801/tree//wikindx/trunk/CHANGELOG.txt?diff=51060a0c271846770c56c75a:2800
x_refsource_CONFIRM
https://sourceforge.net/p/wikindx/code/commit_browser
x_refsource_CONFIRM

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5036		Advisory
https://sourceforge.net/p/wikindx/code/2794/		x_refsource_CONFIRMPatchThird Party Advisory
https://sourceforge.net/p/wikindx/code/2801/tree//wikindx/trunk/CHANGELOG.txt?diff=51060a0c271846770c56c75a:2800		x_refsource_CONFIRM
https://sourceforge.net/p/wikindx/code/commit_browser		x_refsource_CONFIRM