CVE-2011-4332

Joomla! <1.6.3 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (4)

[Various Sources] http://developer.joomla.org/security/news/349-20110601-xss-vulnerabilities.html

[Various Sources] http://www.mavitunasecurity.com/xss-vulnerability-in-joomla-163/

[Mailing List] http://www.openwall.com/lists/oss-security/2011/11/21/29

[Mailing List] http://seclists.org/fulldisclosure/2011/Nov/142

Scores

EPSS 0.0003

EPSS Percentile 7.4%

Classification

CWE

CWE-79

Status draft

Affected Products (25)

joomla/joomla\! < 1.6.3

joomla/joomla\!

... and 10 more

Timeline

Published Nov 23, 2011

Tracked Since Feb 18, 2026