| Package | Affected versions | Patched versions |
|---|---|---|
| simple image gallery extended | < 3.3.1 | 3.3.1 |
The htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery Extended (SIGE) extension 3.2.3 for Joomla! has XSS via a crafted image header, as demonstrated by the Caption-Abstract header object in a JPEG file. This is fixed in 3.3.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free