CVE-2011-4333

Name of the Vulnerable Software and Affected Versions: LabWiki versions 1.1 and earlier

Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the from parameter to "index.php" or the page no parameter to "recentchanges.php".

Recommendations: For LabWiki versions 1.1 and earlier, consider disabling access to the "index.php" and "recentchanges.php" endpoints until a patch is available. As a temporary workaround, restrict the use of the from and page no parameters in these endpoints to minimize the risk of exploitation.