Joomla! vulnerable to Cross-site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-4332US | medium4.3 | — | ||
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | ||||
02
references
External citations — patches, advisories, analysis.
- http://developer.joomla.org/security/news/349-20110601-xss-vulnerabilities.htmlWEB
- http://seclists.org/fulldisclosure/2011/Nov/142WEB
- http://www.openwall.com/lists/oss-security/2011/11/21/29WEB
- https://nvd.nist.gov/vuln/detail/CVE-2011-4332ADVISORY
- https://web.archive.org/web/20111115073609/http://www.mavitunasecurity.com/xss-vulnerability-in-joomla-163WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan