Description

Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field.

Remediation

References

CVE-2013-1749

Related Vulnerabilities

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4402)

Oracle Database Server CVE-2004-2345 Vulnerability (CVE-2004-2345)

Atlassian Jira Improper Privilege Management Vulnerability (CVE-2018-13400)

MySQL CVE-2019-2993 Vulnerability (CVE-2019-2993)

WordPress Plugin WP Security Question Cross-Site Request Forgery (1.0.5)

Severity

Medium

Classification

CVE-2013-1749 CWE-707

Tags

Missing Update Known Vulnerabilities