Description

Cross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enable_category action to index.php.

Remediation

References

CVE-2012-5163

Related Vulnerabilities

Jboss EAP Improper Privilege Management Vulnerability (CVE-2019-14838)

PHP Other Vulnerability (CVE-2012-5381)

MySQL CVE-2016-0596 Vulnerability (CVE-2016-0596)

WordPress Plugin Kama Click Counter SQL Injection (3.4.9)

WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.3)

Severity

Medium

Classification

CVE-2012-5163 CWE-707

Tags

Missing Update Known Vulnerabilities