VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 11, 2014· Updated Jun 16, 2026

CVE-2013-3933

CVE-2013-3933

Description

Cross-site scripting (XSS) vulnerability in the JoomShopping (com_joomshopping) component before 4.3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the user_name parameter to index.php.

Affected products

7
  • Maxxmarketing/Joomshopping6 versions
    cpe:2.3:a:maxxmarketing:joomshopping:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:maxxmarketing:joomshopping:*:*:*:*:*:*:*:*range: <=4.3.0
    • cpe:2.3:a:maxxmarketing:joomshopping:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:maxxmarketing:joomshopping:4.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:maxxmarketing:joomshopping:4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:maxxmarketing:joomshopping:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:maxxmarketing:joomshopping:4.2.2:*:*:*:*:*:*:*
  • Joomla/JoomShoppingllm-create
    Range: <4.3.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.