Medium severity4.8NVD Advisory· Published Sep 30, 2019· Updated Jun 17, 2026
CVE-2019-16684
CVE-2019-16684
Description
An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the list or in the Edit page, the payload executes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Xoops/Xoopsdescription
Patches
Vulnerability mechanics
References
3- github.com/XOOPS/XoopsCore25/commits/masternvdPatchThird Party Advisory
- blog.nirajkhatiwada.com.np/cve-2019-16684-stored-cross-site-scripting/nvdExploitThird Party Advisory
- xoops.org/modules/publisher/nvdVendor Advisory
News mentions
0No linked articles in our index yet.