CVE-2015-7344

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

HikaShop Joomla Component before 2.6.0 has XSS via an injected payload[/caption].

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Mar 9, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-73469.8SQL injection vulnerability in ZCMS 1.1.CVE-2015-73474.8Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.CVE-2015-73484.3Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitrary web script or HTCVE-2015-73496.1Cross-site scripting (XSS) vulnerability in the sample feedback.inc file in VASCO DIGIPASS authentication plug-in for Citrix Web Interface aCVE-2015-73576.1Cross-site scripting (XSS) vulnerability in the uDesign (aka U-Design) theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inCVE-2015-73587.8The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, doeCVE-2015-73597.8The (1) IsVolumeAccessibleByCurrentUser and (2) MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, wCVE-2015-73606.1Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface (WebUI) in Fortinet FortiSandbox before 2.1 allow remote attacCVE-2015-73619.3FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authenticatCVE-2015-73627.8Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, alloCVE-2015-73635.4Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, inCVE-2015-73646.8The HTML_Quickform library, as used in Revive Adserver before 3.2.2, allows remote attackers to bypass the CSRF protection mechanism via an
CVE-2015-7344: Medium severity, CVSS 4.8 | Vulnix