Description

Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 through 2.0.1 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in an IMG tag.

Remediation

References

CVE-2003-1453

Related Vulnerabilities

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-4303)

PrestaShop Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-5682)

Moodle Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-62397)

PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19595)

Drupal Core 6.x Security Bypass (6.0 - 6.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2003-1453