3 results (0.003 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 2

CVE-2015-7324 – Joomla Komento Cross Site Scripting

https://notcve.org/view.php?id=CVE-2015-7324

04 Oct 2015 — Multiple cross-site scripting (XSS) vulnerabilities in helpers/comment.php in the StackIdeas Komento (com_komento) component before 2.0.5 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) img or (2) url tag of a new comment. Múltiples vulnerabilidades de Cross-Site Scripting (XSS) en helpers/comment.php en el componente StackIdeas Komento (com_komento) en versiones anteriores a la 2.0.5 para Joomla! permite que atacantes remotos inyecten scripts web o HTML arbitrarios med... • https://packetstorm.news/files/id/133849 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0

CVE-2014-1837

https://notcve.org/view.php?id=CVE-2014-1837

30 Jan 2014 — Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors related to "checking new comments." Vulnerabilidad de XSS en el componente StackIdeas Komento (com_komento) anterior a la versión 1.7.4 para Joomla! permite a atacantes remotos inyectar script Web o HTML arbitrario a través de vectores relacionados con "la comprobación de nuevos comentarios." • http://osvdb.org/102563 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 4

CVE-2014-0793 – Joomla! Component Komento 1.7.2 - Persistent Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2014-0793

24 Jan 2014 — Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento) component before 1.7.3 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) website or (2) latitude parameter in a comment to the default URI. Múltiples vulnerabilidades de XSS en el componente StackIdeas Komento (com_komento) anterior a la versión 1.7.3 para Joomla! permite a atacantes remotos inyectar script Web o HTML arbitrario a través del parámetro (1) website o (2) latitude en ... • https://packetstorm.news/files/id/124917 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •