Description

Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 through 2.0.1 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in an IMG tag.

Remediation

References

CVE-2003-1453

Related Vulnerabilities

WordPress Plugin Podcast Importer SecondLine SQL Injection (1.3.7)

WordPress Plugin WPMktgEngine Security Bypass (3.7.6)

ownCloud CVE-2022-43679 Vulnerability (CVE-2022-43679)

WordPress Plugin WP Statistics Cross-Site Scripting (13.2.1)

WordPress Plugin CMS Tree Page View Cross-Site Request Forgery (1.2.4)

Severity

Medium

Classification

CVE-2003-1453 CWE-707

Tags

Missing Update Known Vulnerabilities