Description
Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors related to "checking new comments."
References
- 56577 third-party-advisory
- 102563 vdb-entry
- 65173 vdb-entry
- http://stackideas.com/downloads/changelog/komento
- komento-joomla-cve20141837-xss(90974) vdb-entry