Description

Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2013-3267

Related Vulnerabilities

WordPress Plugin YARPP-Yet Another Related Posts SQL Injection (5.30.2)

WordPress Plugin WP Mail SMTP by WPForms Unspecified Vulnerability (0.9.5)

WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.2)

WordPress 5.2.x Prototype Pollution (5.2 - 5.2.14)

WordPress Plugin WooCommerce PHP Object Injection (3.2.3)

Severity

Medium

Classification

CVE-2013-3267 CWE-707

Tags

Missing Update Known Vulnerabilities