First published: Fri Jul 31 2009(Updated: )
Cross-site scripting (XSS) vulnerability in pmlite.php in XOOPS 2.3.1 and 2.3.2a allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute in a URL BBcode tag in a private message.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Xoops Xm Memberstats | =2.3.2a | |
Xoops Xm Memberstats | =2.3.1 | |
Xoops | =2.3.1 | |
Xoops | =2.3.2a |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-6885 is classified as a medium severity cross-site scripting vulnerability.
To fix CVE-2008-6885, it is recommended to upgrade to a patched version of XOOPS that addresses this vulnerability.
CVE-2008-6885 affects XOOPS versions 2.3.1 and 2.3.2a.
CVE-2008-6885 allows remote attackers to perform cross-site scripting attacks via injected scripts in private messages.
Yes, CVE-2008-6885 can be exploited by unauthenticated users if they can send private messages.