CVE-2006-7050

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-24 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in WikkaWiki (Wikka Wiki) before 1.1.6.2 allows remote attackers to inject arbitrary javascript via (1) events in forced links (url parameter) that are not properly handled in formatters/wakka.php, and possibly (2) other vectors in wikka.php.

Affected products

Wikkawiki: through 1.1.6.1

References

http://secunia.com/advisories/20628
http://wikkawiki.org/WikkaReleaseNotes
http://wush.net/trac/wikka/changeset/47
http://wush.net/trac/wikka/ticket/142
http://www.securityfocus.com/bid/18481
http://www.vupen.com/english/advisories/2006/2381
https://exchange.xforce.ibmcloud.com/vulnerabilities/27227
http://secunia.com/advisories/20628
http://wikkawiki.org/WikkaReleaseNotes
http://wush.net/trac/wikka/changeset/47
http://wush.net/trac/wikka/ticket/142
http://www.securityfocus.com/bid/18481

Get alerted when CVE-2006-7050 or the next vulnerability affects your stack