CVE-2011-2892

MEDIUM 4.3CVE-2011-2892 · Published 27/07/2011 · updated 16/06/2026

In short

CVE-2011-2892 is a MEDIUM (CVSS 4.3) vulnerability affecting joomla! (joomla).
Chance of exploitation in the next 30 days (EPSS): 0.76%, higher than 55.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
joomla! joomla	`= 1.6= 1.6.0= 1.6.1`	No fix yet

Description

Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

References

bl0g.yehg.net/2011/04/joomla-161-and-lower-information.html · Exploit
developer.joomla.org/security/news/347-20110409-core-clickjacking.html

More vulnerabilities in joomla!

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free