Cross-site scripting (XSS) vulnerability in the smwfOnSfSetTargetName function in extensions/SMWHalo/includes/SMW_Initialize.php in Semantic Enterprise Wiki (SMW+) 1.5.6, 1.6.0_2 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter to index.php/Special:FormEdit. NOTE: some of these details are obtained from third party information.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2012-02-20T19:00:00
Updated: 2024-08-06T18:53:36.423Z
Reserved: 2012-02-20T00:00:00
Link: CVE-2012-1212
Vulnrichment
No data.
NVD
Status : Modified
Published: 2012-02-24T13:55:07.877
Modified: 2024-11-21T01:36:40.547
Link: CVE-2012-1212
Redhat
No data.