Magistrat

**Name of the Vulnerable Software and Affected Versions** XOOPS versions 1.3.5 through 1.3.9 XOOPS versions 2.0 through 2.0.1 **Description** A cross-site scripting (XSS) issue exists due to a vulnerability in the MytextSanitizer function. This allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in an IMG tag. **Recommendations** For XOOPS versions 1.3.5 through 1.3.9, update to a version outside of this range to resolve the issue. For XOOPS versions 2.0 through 2.0.1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the MytextSanitizer function until a patch is available.