Description

Cross-site scripting (XSS) vulnerability in com_media in Joomla! 3.2.x before 3.2.5 and 3.3.x before 3.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2014-6631

Related Vulnerabilities

WordPress Plugin Gravity Forms Infusionsoft Cross-Site Scripting (1.1.4)

Apache HTTP Server Insertion of Sensitive Information into Log File Vulnerability (CVE-2001-1556)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3190)

WordPress Plugin Rezgo Online Booking Cross-Site Scripting (1.8.6)

Drupal Core 5.x Session Fixation (5.0 - 5.19)

Severity

Medium

Classification

CVE-2014-6631 CWE-707

Tags

Missing Update Known Vulnerabilities