Joomla! vulnerable to Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2011-4332 · ADVISORY
• web.archive.org/web/20111115073609/http://www.mavitunasecurity.com/xss-vulnerability-in-joomla-163 · WEB
• developer.joomla.org/security/news/349-20110601-xss-vulnerabilities.html · WEB
• seclists.org/fulldisclosure/2011/Nov/142 · WEB
• openwall.com/lists/oss-security/2011/11/21/29 · WEB
• mavitunasecurity.com/xss-vulnerability-in-joomla-163

joomla/joomla-cms のその他の脆弱性

• CVE-2025-25227高 7.5Insufficient state checks lead to a vector that allows to bypass 2FA checks.
• CVE-2019-16725中 6.1In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.
• CVE-2019-7743緊急 9.8An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no …
• CVE-2018-11326中 4.8An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the …
• CVE-2013-5583中 4.3Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary …