Description

Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Remediation

References

CVE-2006-2840

Related Vulnerabilities

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5710)

Next.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5284)

SharePoint Missing Authentication for Critical Function Vulnerability (CVE-2026-56164)

Apache Tomcat CVE-2022-29885 Vulnerability (CVE-2022-29885)

WordPress Plugin Catch Under Construction Security Bypass (1.3.4)

Severity

Medium

Classification

CVE-2006-2840

Tags

Missing Update Known Vulnerabilities