Ikiwiki: >> Ikiwiki >> 2.49 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
CVSS Score
4.3
EPSS Score
0.003
Published
2010-03-31
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
CVSS Score
5.0
EPSS Score
0.005
Published
2009-08-31
Page 2