XSS in Kajona

CVE-2014-4742

Cross-site scripting (XSS) vulnerability in system/class_link.php in the System module (module_system) in Kajona before 4.5 allows remote attackers to inject arbitrary web script or HTML via the systemid parameter in a mediaFolder action to index.php.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.019 (77.7th percentile) — read the EPSS interpretation.

Affected products

  • Kajona — versions 3.1.0, 3.1.1, 3.2.0
  • N/a — versions n/a

Weakness classification (CWE)

References