Description

Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2013-3267

Related Vulnerabilities

Oracle Database Server CVE-2011-2243 Vulnerability (CVE-2011-2243)

WordPress Plugin Video Lessons Manager-Best Video Course LMS Cross-Site Scripting (1.7.1)

WordPress Plugin Podcast Importer SecondLine SQL Injection (1.3.7)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Scripting (1.8.9.3)

ownCloud Improper Access Control Vulnerability (CVE-2016-9461)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2013-3267