Description

Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php.

Remediation

References

CVE-2013-2042

Related Vulnerabilities

CakePHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4399)

Jenkins Improper Input Validation Vulnerability (CVE-2013-0331)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Multiple Vulnerabilities (2.0.15)

WordPress Plugin JH 404 Logger Cross-Site Scripting (1.1)

WordPress Plugin Simple Feature Requests Free Unspecified Vulnerability (1.0.4)

Severity

Low

Classification

CVE-2013-2042 CWE-707

Tags

Missing Update Known Vulnerabilities