CVE-2011-5040: Infoproject Biznis Heroj

Medium severity, CVSS 4.3. EPSS: 3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2) widget.dokumenti_lista.php.

Affected products

• Infoproject Biznis Heroj: any version

Published 2011-12-30. Last modified 2026-06-16.