CVE-2013-3931

2020-01-0219:26:27

flexera

www.cve.org

0.001 Low

EPSS

Percentile

41.2%

JSON

Cross-site scripting (XSS) vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the “Business Manager” permission to inject arbitrary web script or HTML via the property_name parameter, related to editing property details.

CNA Affected

[
  {
    "product": "Jomres component for Joomla!",
    "vendor": "Jomres",
    "versions": [
      {
        "status": "affected",
        "version": "before 7.3.1"
      }
    ]
  }
]