Jahia Jahia Xcm
3 CVEs affecting Jahia Jahia Xcm. Latest disclosed: 2013-11-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2013-4624 | | 2013-11-27 | Multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow remote attackers to inject arbitrary web script or HTML via (1)… | |
CVE-2013-4617 | | 2013-11-27 | Jahia xCM before 6.6.2 does not include the HTTPOnly flag in a Set-Cookie header for the JSESSIONID cookie, which makes it easier for remote attackers to obtai… | |
CVE-2013-3920 | | 2013-11-27 | Cross-site scripting (XSS) vulnerability in Jahia xCM before 6.6.2 allows remote authenticated users to inject arbitrary web script or HTML via the "about me"… |