AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2011-3352

MEDIUM · CVSS 4.8 EPSS 0.81%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-11-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2011-3352
Severity
MEDIUM
CVSS
4.8
EPSS
0.81%

Original NVD Description

Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege could use this flaw to execute arbitrary HTML or web script code in the context of the affected website.