Unrated severityNVD Advisory· Published Jan 30, 2014· Updated Jun 17, 2026
CVE-2014-1837
CVE-2014-1837
Description
Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors related to "checking new comments."
Affected products
5<1.7.4+ 4 more
- (no CPE)range: <1.7.4
- cpe:2.3:a:stackideas:komento:*:*:*:*:*:*:*:*range: <=1.7.3
- cpe:2.3:a:stackideas:komento:1.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:stackideas:komento:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:stackideas:komento:1.7.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- secunia.com/advisories/56577nvdVendor Advisory
- stackideas.com/downloads/changelog/komentonvdVendor Advisory
- osvdb.org/102563nvd
- www.securityfocus.com/bid/65173nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/90974nvd
News mentions
0No linked articles in our index yet.