Description
Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script or HTML via the query string to search/results/.
References
- http://packetstormsecurity.com/files/127854/Jamroom-5.2.6-Cross-Site-Scripting.html
- https://www.htbridge.com/advisory/HTB23224
- 20140813 Reflected Cross-Site Scripting (XSS) in Jamroom mailing-list
- 69219 vdb-entry
- https://www.jamroom.net/the-jamroom-network/networkmarket/43/search?expanded_changelog=1