CVE-2012-2413

MEDIUM 4.3CVE-2012-2413 · Published 20/10/2014 · updated 16/06/2026

In short

CVE-2012-2413 is a MEDIUM (CVSS 4.3) vulnerability affecting joomla! (joomla).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
joomla! joomla	`= 1.5.0= 1.5.1= 1.5.10= 1.5.11= 1.5.12= 1.5.13= 1.5.14= 1.5.15= 1.5.16= 1.5.17= 1.5.18= 1.5.19= 1.5.2= 1.5.20= 1.5.21= 1.5.22= 1.5.23= 1.5.24= 1.5.25= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.5.9≤ 1.5.26`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attackers to inject arbitrary web script or HTML via the Mod* cookie parameter to html/modules.php.

References

More vulnerabilities in joomla!

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

joomla!

joomla

= 1.5.0= 1.5.1= 1.5.10= 1.5.11= 1.5.12= 1.5.13= 1.5.14= 1.5.15= 1.5.16= 1.5.17= 1.5.18= 1.5.19= 1.5.2= 1.5.20= 1.5.21= 1.5.22= 1.5.23= 1.5.24= 1.5.25= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.5.9≤ 1.5.26

No fix yet

More vulnerabilities in joomla!

See all →