Description

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) unspecified parameters to apps/calendar/ajax/event/new.php or (2) url parameter to apps/bookmarks/ajax/addBookmark.php.

Remediation

References

CVE-2013-0203

Related Vulnerabilities

WordPress Plugin Internal Links Manager Unspecified Vulnerability (2.0.1)

WordPress Plugin Backup & Restore Dropbox Multiple Vulnerabilities (1.4.7.5)

WordPress Plugin GS Filterable Portfolio Cross-Site Scripting (1.6.0)

WordPress Plugin Gallery-Photo Albums-Portfolio Multiple Cross-Site Request Forgery Vulnerabilities (1.2.59)

Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-40662)

Severity

Medium

Classification

CVE-2013-0203 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities