Unscored CVE-2019-16683 EUVD-2019-7243GHSA-fqrf-77gm-wg2v

An issue was discovered in the image-manager in Xoops 2.5.10. When the breadcrumb showing the category name is hovered over while editing a…

Published Sep 30, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in the image-manager in Xoops 2.5.10. When the breadcrumb showing the category name is hovered over while editing any image, a JavaScript payload executes.

References

https://github.com/XOOPS/XoopsCore25/commits/master
https://xoops.org/modules/publisher/
https://blog.nirajkhatiwada.com.np/cve-2019-16683-stored-cross-site-scripting/