CVE-2010-4949 Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary....
MediumCVSS 4.3
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML by entering it in an unspecified window.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| evnix freichat | <= 2.1.1 | No fix listed |
| evnix freichat | = 1.0 | No fix listed |
| evnix freichat | = 2.0 | No fix listed |
| evnix freichat | = 2.1 | No fix listed |
| evnix freichatpure | <= 1.2.1 | No fix listed |
| evnix freichatpure | = 1.0 | No fix listed |
| evnix freichatpure | = 1.2 | No fix listed |
References
- forum.joomla.org exploit
- 40751 third-party-advisory vendor-advisory
- 66628 vdb-entry
- 41961 exploit vdb-entry
- freichat-unspecified-xss(60828) vdb-entry