Description
Cross-site scripting (XSS) vulnerability in usersettings.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
References
- ADV-2007-1725 vdb-entry
- http://wikkawiki.org/WikkaReleaseNotes
- 35828 vdb-entry
- 23894 vdb-entry
- http://wush.net/trac/wikka/ticket/363
- 25181 third-party-advisory