Unscored CVE-2013-5952 EUVD-2013-5784GHSA-8r89-7xfh-6ggc

Multiple cross-site scripting (XSS) vulnerabilities in the Freichat (com_freichat) component, possibly 9.4 and earlier, for Joomla! allow r…

Published Mar 19, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Freichat (com_freichat) component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) xhash parameter to client/chat.php or (3) toname parameter to client/plugins/upload/upload.php.

References

57361 third-party-advisory
http://packetstormsecurity.com/files/125737
66254 vdb-entry
20140315 [CVE-2013-5952] Multiple Cross Site Scripting Vulnerabilities in Freichat mailing-list
freichat-cve20135952-xss(91824) vdb-entry