CVE-2012-5455

Joomla! <3.0.1 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the language search component in Joomla! before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "typographical error."

References (6)

[Vendor Advisory] http://developer.joomla.org/security/news/541-20121001-core-xss-vulnerability

[Vendor Advisory] http://secunia.com/advisories/50879

[Vendor Advisory] http://www.joomla.org/announcements/release-news/5468-joomla-3-0-1-released.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/55858

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/79171

[Third Party Advisory, VDB Entry] http://osvdb.org/86134

Scores

EPSS 0.0001

EPSS Percentile 1.3%

Details

CWE

CWE-79

Status published

Products (2)

joomla/joomla\!

n/a/n/a

Published Oct 22, 2012

Tracked Since Feb 18, 2026