CVE-2011-4332 — Cross-site Scripting in Joomla Joomla-cms

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.0%
top 92.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Joomla Joomla-cmsJoomla !
Timeline
PublishedNov 23
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDjoomla/joomla_!1.6.3+6
▶Packagistjoomla/joomla-cms< 1.6.4

🔴Vulnerability Details

3
GHSA
Joomla! vulnerable to Cross-site Scripting↗2022-05-17
▶
OSV
Joomla! vulnerable to Cross-site Scripting↗2022-05-17
▶
CVEList
CVE-2011-4332: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1↗2011-11-23
▶
CVE-2011-4332 — Cross-site Scripting in Joomla | cvebase