Description

Cross-site scripting (XSS) vulnerability in htsrv/login.php in b2evolution 1.8.6 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes in the redirect_to parameter.

Remediation

References

CVE-2007-0175

Related Vulnerabilities

WordPress Plugin 123ContactForm for WordPress Multiple Vulnerabilities (1.5.6)

WordPress Plugin SLIDER PHOTO GALLERY Multiple Vulnerabilities (1.0)

Mailman Other Vulnerability (CVE-2006-1712)

WordPress Plugin Import Spreadsheets from Microsoft Excel Arbitrary File Upload (10.1.4)

Dolibarr CVE-2023-38886 Vulnerability (CVE-2023-38886)

Severity

Medium

Classification

CVE-2007-0175 CWE-707

Tags

Missing Update Known Vulnerabilities