Description

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vectors.

Remediation

References

CVE-2013-3056

Related Vulnerabilities

WordPress Plugin LearnPress-WordPress LMS Multiple Cross-Site Scripting Vulnerabilities (4.1.3)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-43687)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-3546)

WordPress Plugin Better Font Awesome Cross-Site Request Forgery (2.0.1)

WordPress Plugin URL Cloak & Encrypt Cross-Site Scripting (2.0)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2013-3056