Description
Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the returnpage parameter to index.php.
Remediation
References
Related Vulnerabilities
MySQL CVE-2017-10284 Vulnerability (CVE-2017-10284)
WordPress Plugin Author Page Views Cross-Site Scripting (1.0)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-0701)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1154)
LimeSurvey Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5573)