Description

Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the (1) forum and (2) topic_id parameters.

Remediation

References

CVE-2004-2756

Related Vulnerabilities

WordPress Plugin Ivory Search-WordPress Search Cross-Site Scripting (4.5.10)

WordPress Plugin FG Joomla to WordPress Cross-Site Scripting (3.30.0)

Internet Information Services Other Vulnerability (CVE-2002-0079)

WordPress Plugin Custom Post View Generator Cross-Site Scripting (0.4.6)

Joomla! Core 1.6.x Multiple Cross-Site Scripting Vulnerabilities (1.6.0 - 1.6.3)

Severity

Medium

Classification

CVE-2004-2756 CWE-707

Tags

Missing Update Known Vulnerabilities