JVN#00425482 XF-Section vulnerable to cross-site scripting

XF-Secion from Happy Linux is a XOOPS module that categorizes contents. XF-Section contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Do not use XF-Section
Since the product is no longer being developed, users are recommended to discontinue use of XF-Section and switch to a different product that provides equivalent functionality.

Products Affected

• XF-Secion 1.12a and earlier