Cross-site scripting in Joomla!

Posted: October 10, 2012 in Vulnerabilities
Tags: , ,

Joomla vulnerabilityVulnerability: Cross-site scripting in Joomla!

Danger: Low
If the Patch: Yes
Number of vulnerabilities: 1
Impact: Cross Site Scripting
Affected products: Joomla! 3.x

Affected versions: Joomla! versions prior to 3.0.1.

Description:

The vulnerability allows malicious people to conduct XSS attacks.

The vulnerability is caused due to insufficient input validation in a component language search. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.

Manufacturer URL: http://www.joomla.org/3/

Solution: Update to version 3.0.1 from the manufacturer.

links:

http://www.joomla.org/announcements/release-news/5468-joomla-3-0-1-released.html
http://developer.joomla.org/security/news/541-20121001-core-xss-vulnerability

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s