Vulnerabilities

TI-2013-01438 CVE-2013-1636 · GHSA-j6f8-7w49-7g29

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka…

LOW 29

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06314 Published 2014-03-12 No fix listed CWE-79

TI-2012-03636 CVE-2012-4256 · GHSA-vcp7-xxjg-2gwg

The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain…

LOW 26

The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0148 Published 2012-08-13 No fix listed CWE-200

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka…

The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain…