Vulnerability Database

300,214

Total vulnerabilities in the database

CVE-2016-4561

Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message.

  • Published: May 10, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-4561
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
ikiwiki / ikiwiki - 3.20160121.x
debian / debian_linux 8.0 8.0.x