CVE-2014-0793

The CVE-2014-0793 issue affects the Komento Joomla Extension (Stack Ideas) before 1.7.3. The vulnerability is a Cross‑Site Scripting (XSS) flaw in user-supplied data passed via the website and latitude fields in a comment submitted to ?option=com_komento, enabling remote attackers to inject arbit...

CVE-2014-1837

CVE-2014-1837 describes a cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component for Joomla! prior to version 1.7.4. The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to adding or checking new comments. The NVD entry i...