VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 11, 2014· Updated Apr 29, 2026

CVE-2013-3933

CVE-2013-3933

Description

Cross-site scripting (XSS) vulnerability in the JoomShopping (com_joomshopping) component before 4.3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the user_name parameter to index.php.

Affected products

6
  • Maxxmarketing/Joomshopping6 versions
    cpe:2.3:a:maxxmarketing:joomshopping:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:maxxmarketing:joomshopping:*:*:*:*:*:*:*:*range: <=4.3.0
    • cpe:2.3:a:maxxmarketing:joomshopping:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:maxxmarketing:joomshopping:4.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:maxxmarketing:joomshopping:4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:maxxmarketing:joomshopping:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:maxxmarketing:joomshopping:4.2.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.