CVE-2013-5956: XSS

Published Apr 25, 2014

Updated

Cross-site scripting (XSS) vulnerability in includes/flvthumbnail.php in the Youtube Gallery (comyoutubegallery) component 3.4.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the videofile parameter.

Affected Software

1 affected component

Joomlaboat Com Youtubegallery Joomla\!=3.4.0

Event History

Apr 25, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-5956?

CVE-2013-5956 has a medium severity rating due to the potential for remote code execution via cross-site scripting.

How do I fix CVE-2013-5956?

To fix CVE-2013-5956, update the com_youtubegallery component to a version newer than 3.4.0.

What impact does CVE-2013-5956 have on my Joomla! site?

CVE-2013-5956 allows attackers to inject arbitrary scripts into pages viewed by other users, potentially compromising user data.

What versions of the Youtube Gallery are affected by CVE-2013-5956?

CVE-2013-5956 affects version 3.4.0 of the Youtube Gallery component for Joomla!.

Who can exploit CVE-2013-5956?

CVE-2013-5956 can be exploited by remote attackers who can send crafted requests to the affected Joomla! site.