CVEvulnerability
CVE-2013-4759
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) fullname, or (3) email parameter to magnoliaPublic/demo-project/members-area/registration.html.
Affected configurations
• magnolia-cms magnolia form module 1.4
• magnolia-cms magnolia form module 1.4.1
• magnolia-cms magnolia form module 1.4.2
• magnolia-cms magnolia form module 1.4.3
• magnolia-cms magnolia form module 1.4.4
• magnolia-cms magnolia form module 1.4.5
• magnolia-cms magnolia form module 1.4.6
• magnolia-cms magnolia form module 2.0
• magnolia-cms magnolia form module 2.0.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0160.html Exploit
- http://osvdb.org/95628 osvdb.org
- http://packetstormsecurity.com/files/122527/Magnolia-CMS-5.0.1-Community-Edition-Cross-Site-Scripting.html Exploit
- http://www.securityfocus.com/bid/61423 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85940 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23163 Exploit
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0160.html Exploit
- http://osvdb.org/95628 osvdb.org
- http://packetstormsecurity.com/files/122527/Magnolia-CMS-5.0.1-Community-Edition-Cross-Site-Scripting.html Exploit
- http://www.securityfocus.com/bid/61423 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85940 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23163 Exploit