CVE-2013-5320

Cross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before 2.3.9.8 allows remote attackers to inject arbitrary web script or HTML via the txtSubject parameter.

• sourcetreesolutions mojoportal (<= 2.3.9.7) • sourcetreesolutions mojoportal 2.3.0.1 • sourcetreesolutions mojoportal 2.3.0.4 • sourcetreesolutions mojoportal 2.3.0.8 • sourcetreesolutions mojoportal 2.3.1.0 • sourcetreesolutions mojoportal 2.3.1.3 • sourcetreesolutions mojoportal 2.3.1.5 • sourcetreesolutions mojoportal 2.3.1.6 • sourcetreesolutions mojoportal 2.3.1.7 • sourcetreesolutions mojoportal 2.3.1.9 • sourcetreesolutions mojoportal 2.3.2.9 • sourcetreesolutions mojoportal 2.3.3.2 • sourcetreesolutions mojoportal 2.3.3.4 • sourcetreesolutions mojoportal 2.3.3.6 • sourcetreesolutions mojoportal 2.3.3.9 • sourcetreesolutions mojoportal 2.3.4.1 • sourcetreesolutions mojoportal 2.3.4.2 • sourcetreesolutions mojoportal 2.3.4.4 • sourcetreesolutions mojoportal 2.3.4.5 • sourcetreesolutions mojoportal 2.3.4.8 • sourcetreesolutions mojoportal 2.3.5.2 • sourcetreesolutions mojoportal 2.3.5.3 • sourcetreesolutions mojoportal 2.3.5.4 • sourcetreesolutions mojoportal 2.3.5.5 • sourcetreesolutions mojoportal 2.3.5.8 • sourcetreesolutions mojoportal 2.3.6.1 • sourcetreesolutions mojoportal 2.3.6.2 • sourcetreesolutions mojoportal 2.3.6.4 • sourcetreesolutions mojoportal 2.3.6.5 • sourcetreesolutions mojoportal 2.3.6.6 • sourcetreesolutions mojoportal 2.3.6.7 • sourcetreesolutions mojoportal 2.3.7.5 • sourcetreesolutions mojoportal 2.3.7.6 • sourcetreesolutions mojoportal 2.3.8.1 • sourcetreesolutions mojoportal 2.3.8.5 • sourcetreesolutions mojoportal 2.3.9.0 • sourcetreesolutions mojoportal 2.3.9.3 • sourcetreesolutions mojoportal 2.3.9.4 • sourcetreesolutions mojoportal 2.3.9.5 • sourcetreesolutions mojoportal 2.3.9.6