CVE-2007-5577

Joomla! < 1.0.13 - Cross-Site Scripting via Section Manager or New Menu Item Fields

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component, or (3) multiple unspecified fields in New Menu Item.

References (7)

Core 7
Core References
Vendor Advisory x_refsource_misc
http://www.joomla.org/content/view/3677/1/
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/37173
Release Notes, Vendor Advisory x_refsource_confirm
http://www.joomla.org/content/view/3670/78/
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25804
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24663
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35119

Scores

EPSS 0.0007
EPSS Percentile 20.3%

Details

CWE
CWE-79
Status published
Products (1)
joomla/joomla\! < 1.0.13
Published Oct 18, 2007
Tracked Since Feb 18, 2026