Cross-Site Scripting Vulnerability in JChatSocial Component for Joomla!
CVE-2014-3863

Currently unrated

Key Information:

Vendor

J\!extensions Store

Status
Jchatsocial
Vendor
CVE Published:
20 October 2014

What is CVE-2014-3863?

The JChatSocial component for Joomla! prior to version 2.3 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML. This is achieved by manipulating the filename parameter in a file upload within an active JChat chat window, potentially leading to unauthorized actions or data exposure for users interacting with the chat interface.

References

http://www.securityfocus.com/bid/68424
vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/532662/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/127372/Joomla-JChatS...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.