cbcvebase.
CVE-2011-2710
published 2011-07-27

CVE-2011-2710: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to…

PriorityP415medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.26%
66.1th percentile
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, (2) allow remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search action to index.php in the com_search component. NOTE: vector 2 exists because of an incomplete fix for CVE-2011-2509.5.

Affected

31 ranges· showing 25
VendorProductVersion rangeFixed in
joomlajoomla_!<= 1.6.6—
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.