Cross site scripting

2019-03-2915:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

JSON

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS.

CPENameOperatorVersion
je_messengereq1.2.2

CPE	Name	Operator	Version
	je_messenger	eq	1.2.2

References

extensions.joomla.org/extension/je-messenger/

github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9919.md