Unrated severityNVD Advisory· Published Nov 30, 2011· Updated Jun 16, 2026

CVE-2011-4647

Description

Multiple cross-site scripting (XSS) vulnerabilities in the story creation feature in Geeklog 1.8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) code or (2) raw BBcode tags.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Geeklog/Geeklog2 versions
cpe:2.3:a:geeklog:geeklog:1.8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:geeklog:geeklog:1.8.0:*:*:*:*:*:*:*
- (no CPE)range: <=1.8.0

Patches

Vulnerability mechanics

References

osvdb.org/76297nvdPatch
www.geeklog.net/article.php/geeklog-1.8.1nvdPatch
project.geeklog.net/cgi-bin/hgwebdir.cgi/geeklog/rev/fd3ca3aebf86nvdExploitPatch
secunia.com/advisories/46348/nvdVendor Advisory
project.geeklog.net/tracking/view.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000