CVE-2010-2514

Dacian Strain Com Jfaq - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the question parameter in an add2 action to index.php.

Scores

EPSS 0.0029
EPSS Percentile 51.6%

Classification

CWE
CWE-79
Status published

Affected Products (2)

dacian_strain/com_jfaq
n/a/n/a

Timeline

Published Jun 28, 2010
Tracked Since Feb 18, 2026