CVE-2014-4742

Kajona CMS (System module) is affected by CVE-2014-4742: an XSS in system/class_link.php via the systemid parameter in a mediaFolder action to index.php, affecting Kajona before version 4.5. The vulnerability allows remote attackers to inject arbitrary web script/HTML. Several entries (NVD, Red H...

CVE-2014-4742: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in system/classlink.php in the System module modulesystem in Kajona before 4.5 allows remote attackers to inject arbitrary web script or HTML via the systemid parameter in a mediaFolder action to index.php...