Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences in (1) the default stylesheet or (2) an alternate stylesheet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ikiwiki 'meta stylesheet'跨站脚本攻击漏洞
Vulnerability Description
ikiwiki是一个wiki编译器，可将wiki页面转换为可在网站发布的HTML页面。 ikiwiki 3.20110328之前版本在处理"元样式表"指令过程中，没有确认htmlscrubber插件是否启用。远程认证用户可以借助（1）默认样式表或（2）备用样式表中的特制层叠样式表（CSS）令牌序列，进行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A