Description
Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is possible that this overlaps CVE-2011-0535.
Remediation
References
Related Vulnerabilities
WordPress Plugin Asset Manager 'upload.php' Arbitrary File Upload (0.3)
WordPress Plugin Admin side data storage for Contact Form 7 Cross-Site Scripting (1.1.1)
WordPress Plugin Livemesh Addons for Elementor Security Bypass (2.5.2)
WordPress 3.8.x Same Origin Method Execution (SOME) Vulnerability (3.8 - 3.8.13)
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2017-9119)