CVE-2010-4837

JSupport 1.5.6 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter (title field) in a saveTicket action to index2.php. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Valentin · textwebappsphp

https://www.exploit-db.com/exploits/15501

View Code ZIP pw:eip

References (5)

[Exploit] http://packetstormsecurity.org/files/view/95796/joomlajsupport-xss.txt

[Vendor Advisory] http://secunia.com/advisories/42262

[Exploit] http://www.exploit-db.com/exploits/15501

[Exploit] http://www.xenuser.org/documents/security/Joomla_com_jsupport_XSS.txt

[Third Party Advisory] http://securityreason.com/securityalert/8377

Scores

EPSS 0.0033

EPSS Percentile 55.7%

Classification

CWE

CWE-79

Status published

Affected Products (2)

extensiondepot/com_jsupport

n/a/n/a

Timeline

Published Sep 14, 2011

Tracked Since Feb 18, 2026