medium4.3
CVE-2008-1063
Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module for XOOPS allows remote attackers to inject arbitrary web scrip…
Impact
Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xoops | Xm-Memberstats | Version 2.0 |