VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 30, 2011· Updated Jun 16, 2026

CVE-2011-5040

CVE-2011-5040

Description

Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2) widget.dokumenti_lista.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Infoproject/Biznis Heroj2 versions
    cpe:2.3:a:infoproject:biznis_heroj:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:infoproject:biznis_heroj:*:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.