CVE-2012-1899: Nikola Posa Webfoliocms

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name, (2) Last name or (3) Email (required) fields.

Affected products

• Nikola Posa Webfoliocms: version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; version 1.0.6 only; version 1.0.7 only; …

Published 2012-09-17. Last modified 2026-06-16.