VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 5, 2013· Updated Jun 16, 2026

CVE-2011-5267

CVE-2011-5267

Description

Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) to_p_dict or (2) to_r_list parameter. NOTE: this issue might be related to the htmlarea plugin and CVE-2013-5670.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Wikiwig/Wikiwig2 versions
    cpe:2.3:a:wikiwig_project:wikiwig:5.0.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wikiwig_project:wikiwig:5.0.1:*:*:*:*:*:*:*
    • (no CPE)range: =5.01
  • Xinha/Xinhallm-fuzzy

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.