Description
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Poll Multiple SQL Injection and Security Bypass Vulnerabilities (34.04)
Oracle Database Server CVE-2019-2939 Vulnerability (CVE-2019-2939)
WordPress Plugin Product Addons & Fields for WooCommerce Unspecified Vulnerability (13.7)
WordPress Plugin Xorbin Digital Flash Clock Cross-Site Scripting (1.0)
WordPress Plugin Advanced post slider Unspecified Vulnerability (2.4.0)