CVE-2014-5098 Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script or HTML via the query string to search/results/.
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script or HTML via the query string to search/results/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jamroom search module | <= 1.2.1 | No fix listed |
References
- packetstormsecurity.com exploit
- 20140813 Reflected Cross-Site Scripting (XSS) in Jamroom mailing-list
- 69219 vdb-entry
- www.htbridge.com exploit
- www.jamroom.net vendor-advisory