CVE-2011-4277

2011-11-0317:00:00

mitre

www.cve.org

cross-site scripting

courseforum projectforum

7.0.1.3038

remote attackers

web script injection

html injection

crafted name

wiki page

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

64.4%

JSON

Cross-site scripting (XSS) vulnerability in CourseForum ProjectForum 7.0.1.3038 allows remote attackers to inject arbitrary web script or HTML via a crafted name of an object within a more object on a wiki page.

References

www.kb.cert.org/vuls/id/901251