Description

Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field.

Remediation

References

CVE-2013-1749

Related Vulnerabilities

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-37065)

WordPress Plugin Coming Soon Page & Maintenance Mode Unspecified Vulnerability (1.8.2)

WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.5.0)

WordPress Plugin Social Networking & E-commerce Arbitrary File Upload (0.0.32)

WordPress Plugin Simple:Press 'sf-header-forum.php' SQL Injection (4.3.0)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2013-1749