Description

Cross-site scripting (XSS) vulnerability in name.html in easyXDM before 2.4.19 allows remote attackers to inject arbitrary web script or HTML via the location.hash value.

Remediation

References

CVE-2014-1403

Related Vulnerabilities

Atlassian Jira Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-20408)

Joomla! Core 1.5.x Security Bypass (1.5.0 - 1.5.13)

XWiki Missing Authorization Vulnerability (CVE-2022-31167)

WordPress Plugin Portfolio-WordPress Portfolio Cross-Site Request Forgery (2.8.8)

Joomla Improper Authentication Vulnerability (CVE-2022-23795)

Severity

Medium

Classification

CVE-2014-1403 CWE-707

Tags

Missing Update Known Vulnerabilities