Cross-site scripting (XSS) vulnerability in TextSearch in WackoWiki 3.5 allows remote attackers to inject arbitrary web script or HTML via the phrase parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wackowiki | Wackowiki | r3 (including) | r3 (including) |
| Wackowiki | Wackowiki | r3.5 (including) | r3.5 (including) |