CVE-2014-1968 Cross-site scripting (XSS) vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| riken xoonips | <= 3.47 | No fix listed |
| riken xoonips | = 3.40 | No fix listed |
| riken xoonips | = 3.41 | No fix listed |
| riken xoonips | = 3.42 | No fix listed |
| riken xoonips | = 3.43 | No fix listed |
| riken xoonips | = 3.44 | No fix listed |
| riken xoonips | = 3.45 | No fix listed |
| riken xoonips | = 3.46 | No fix listed |
References
- JVN#87797318 third-party-advisory
- JVNDB-2014-000025 third-party-advisory
- 65807 vdb-entry
- xoonips.sourceforge.jp patch