Non évaluée

An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the list or in t...

CVE-2019-16684 Première détection SecPulse Oct 1, 2019

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the list or in the Edit page, the payload executes.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory xoops.org
patch github.com
report blog.nirajkhatiwada.com.np

Faits clés

Gravité: Non évaluée
Publication: Oct 1, 2019
Première détection SecPulse: Oct 1, 2019

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50