Description

Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 through 2.0.1 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in an IMG tag.

Remediation

References

CVE-2003-1453

Related Vulnerabilities

CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-2117)

WordPress Plugin WP RSS Aggregator-News Feeds, Autoblogging, Youtube Video Feeds and More Cross-Site Scripting (4.19.2)

Python Uncontrolled Resource Consumption Vulnerability (CVE-2021-3737)

WordPress Plugin Akeeba Backup CORE for WordPress Arbitrary File Upload (1.1.3)

WordPress Plugin BP Profile Search PHP Object Injection (4.5.3)

Severity

Medium

Classification

CVE-2003-1453 CWE-707

Tags

Missing Update Known Vulnerabilities