cbcvebase.
CVE-2011-4909
published 2012-10-07

CVE-2011-4909: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary web script or HTML via the HTTP_REFERER…

PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
1.88%
76.8th percentile
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary web script or HTML via the HTTP_REFERER header to (1) components/com_content/views/article/tmpl/form.php, (2) components/com_user/controller.php, (3) plugins/system/legacy/html.php, or (4) templates/beez/html/com_content/article/form.php.

Affected

12 ranges
VendorProductVersion rangeFixed in
joomlajoomla_!<= 1.5.11—
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
joomlajoomla_!——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.