CVE-2013-4692

CVE-2013-4692 corresponds to a cross-site scripting vulnerability in the Xorbin Analog Flash Clock extension for Joomla and related WordPress/XORBin clocks. The root cause is unsanitized input in the widgetUrl/urlWindow parameters from external input, enabling user-controllable script execution i...