EUVD-2014-3800

Malware in sbrugna...

CVE-2014-3863

Cross-site scripting XSS vulnerability in the JChatSocial component before 2.3 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the filename parameter in a file upload in an active JChat chat window...

Cross site scripting

Cross-site scripting XSS vulnerability in the JChatSocial component before 2.3 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the filename parameter in a file upload in an active JChat chat window...

CVE-2014-3863

Cross-site scripting XSS vulnerability in the JChatSocial component before 2.3 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the filename parameter in a file upload in an active JChat chat window...

CVE-2014-3863

CVE-2014-3863 is a stored XSS in the Joomla extension JChatSocial (before 2.3). The vulnerability allows remote attackers to inject arbitrary script via the filename parameter in a file upload in an active JChat chat window. Affected versions are 2.2 and lower; vendor fixed the issue within hours...

CVE-2014-3863 - Stored XSS in JChatSocial

CVE-2014-3863 =================== "Stored Cross-Site Scripting XSS" CWE-79 vulnerability in "JChatSocial" Joomla extension. Vendor =================== Joomla! Extensions Store Product =================== JChatSocial: the Joomla live chat "JChatSocial is a powerful chat system for Joomla with a lo...

JChatSocial, 2.2 and lower

JChatSocial, 2.2 and lower, XSS Cross Site Scripting...