Unrated severityNVD Advisory· Published Jan 30, 2014· Updated Apr 29, 2026
CVE-2014-1837
CVE-2014-1837
Description
Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors related to "checking new comments."
Affected products
4cpe:2.3:a:stackideas:komento:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:stackideas:komento:*:*:*:*:*:*:*:*range: <=1.7.3
- cpe:2.3:a:stackideas:komento:1.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:stackideas:komento:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:stackideas:komento:1.7.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- secunia.com/advisories/56577nvdVendor Advisory
- stackideas.com/downloads/changelog/komentonvdVendor Advisory
- osvdb.org/102563nvd
- www.securityfocus.com/bid/65173nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/90974nvd
News mentions
0No linked articles in our index yet.