Description

Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php.

Remediation

References

CVE-2005-2112

Related Vulnerabilities

Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2019-10081)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28040)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-25955)

Oracle JRE CVE-2023-21968 Vulnerability (CVE-2023-21968)

Liferay Portal Inefficient Regular Expression Complexity Vulnerability (CVE-2023-33950)

Severity

Medium

Classification

CVE-2005-2112

Tags

Missing Update Known Vulnerabilities