CVE-2013-5952: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the Freichat (comfreichat) component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) xhash parameter to client/chat.php or (3) toname parameter to client/plugins/upload/upload.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5952?
CVE-2013-5952 is classified as a high severity vulnerability due to its potential impact on user security through cross-site scripting.
How do I fix CVE-2013-5952?
To fix CVE-2013-5952, update the Freichat component to the latest version that is patched against XSS vulnerabilities.
What are the main exploit vectors for CVE-2013-5952?
CVE-2013-5952 can be exploited through the id or xhash parameters to client/chat.php and the toname parameter to client/plugins/upload/.
Which versions of Freichat are affected by CVE-2013-5952?
CVE-2013-5952 affects the Freichat versions up to and including 9.4.
Who can be affected by CVE-2013-5952?
Users of Joomla! running the vulnerable version of the Freichat component are at risk of being affected by CVE-2013-5952.