CVE-2013-6804

Name of the Vulnerable Software and Affected Versions Jamroom versions prior to 1.1.1

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the search string parameter to the "search/results/all/1/4" API endpoint.

Recommendations For versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Search module or sanitizing the search string parameter to prevent malicious input.