Description
An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the list or in the Edit page, the payload executes.
Unscored
CVE-2019-16684
EUVD-2019-7244GHSA-jx9w-xwx8-w7hj
An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the l…
Published Sep 30, 2019 · Updated Aug 5, 2024 · Assigned by mitre