Cross-Site Scripting Vulnerability in HikaShop Joomla Component
CVE-2015-7344

4.8MEDIUM

Key Information:

Vendor

Hikashop

Status
Hikashop
Vendor
CVE Published:
9 March 2020

What is CVE-2015-7344?

The HikaShop component for Joomla, prior to version 2.6.0, contains a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious payloads. This flaw can be exploited by an unauthorized user, potentially leading to unauthorized actions or data exposure on affected Joomla sites. Websites utilizing the HikaShop component are recommended to upgrade to the latest version to mitigate this security threat.

References

https://labs.integrity.pt/advisories/cve-2015-7344/
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.