CVE-2013-5952

Codologic Com Freichat < 9.4 - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Freichat (com_freichat) component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) xhash parameter to client/chat.php or (3) toname parameter to client/plugins/upload/upload.php.

References (5)

[Exploit] http://archives.neohapsis.com/archives/fulldisclosure/2014-03/0275.html

[Exploit] http://packetstormsecurity.com/files/125737

[Vendor Advisory] http://secunia.com/advisories/57361

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/91824

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/66254

Scores

EPSS 0.0038

EPSS Percentile 59.0%

Details

CWE

CWE-79

Status published

Products (2)

codologic/com_freichat < 9.4

n/a/n/a

Published Mar 19, 2014

Tracked Since Feb 18, 2026