Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Stackideas.com Component: Komento Clear all filters
TI-2015-06091 CVE-2015-7324 · GHSA-mv48-x4rr-23wh

Multiple cross-site scripting (XSS) vulnerabilities in helpers/comment.php in the…

Priority LOW 31

Multiple cross-site scripting (XSS) vulnerabilities in helpers/comment.php in the StackIdeas Komento (com_komento) component before 2.0.5 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01785 Published 2017-12-27 No fix listed CWE-79
TI-2014-01439 CVE-2014-1837 · GHSA-3f7c-2fhm-xwf2

Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento)…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors related to "checking new comm…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2014-01-30 No fix listed CWE-79
TI-2014-00736 CVE-2014-0793 · GHSA-55fx-8656-67xw

Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento) component before 1.7.3 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) website or (2) lati…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.017 Published 2014-01-30 No fix listed CWE-79