Description
Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/61600
Exploit x_refsource_misc
http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability/
Scores
EPSS
0.0001
EPSS Percentile
1.0%
Details
CWE
CWE-79
Status
published
Products (2)
joomla/joomla-cms
0 - 3.1.6Packagist
joomla/joomla\!
3.1.5
Published
Dec 29, 2013
Tracked Since
Feb 18, 2026