CVE-2013-3931: Jomres

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web script or HTML via the property_name parameter, related to editing property details.

Affected products

• Jomres Jomres: before 7.3.1 (fixed in 7.3.1)

Published 2020-01-02. Last modified 2026-06-16.