Description

Cross-site scripting (XSS) vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body.

Remediation

References

CVE-2012-5911

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-2000-1104)

Joomla Other Vulnerability (CVE-2006-0303)

WebLogic CVE-2018-2893 Vulnerability (CVE-2018-2893)

Internet Information Services Other Vulnerability (CVE-2003-0718)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1591)

Severity

Medium

Classification

CVE-2012-5911 CWE-707

Tags

Missing Update Known Vulnerabilities