PT-2019-19935 · Joomla · Harmis Je Messenger
CVE-2019-9919
·
Publicado
2019-03-29
·
Atualizado
2023-02-03
CVSS v3.1
5.4
Média
| Vetor | AC:L/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R |
Name of the Vulnerable Software and Affected Versions
Harmis JE Messenger component version 1.2.2
Description
An issue was discovered in the Harmis JE Messenger component for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened.
Recommendations
For version 1.2.2, consider disabling the execution of JavaScript in received messages until a patch is available. Restrict access to the messaging functionality to minimize the risk of exploitation.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Harmis Je Messenger