The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.
Common Name Link Injection Vulnerability VWE-ID VWE-2010-0072 Related Report None Severity HIGH Exploit Difficulty NORMAL Platform Affects all platforms supported by the vulnerable versions. Description HTML/Javascript injection.
Discovered July 27, 2010 Resolved July 28, 2010 Patches Available 3.0.2
2.5.7 Patch Level 2Workaround Using the Wiki Code Manager, disable all BB-Codes that are used to create wiki links.
Sub-Categories of VWE-2010-0072
-
#
-
# (cont.)
-
# (cont.)