Description

Joomla! Core is prone to a clickjacking vulnerability. Successful exploitation will allow an attacker to compromise the affected application or obtain sensitive information; other attacks are also possible. Joomla! Core versions 2.5.x ranging from 2.5.0 and up to and including 2.5.7 are vulnerable.

Remediation

Update to Joomla! Core version 2.5.8 or latest

References

https://developer.joomla.org/news/security/544-20121102-core-clickjacking.html

Related Vulnerabilities

WordPress Plugin WordPress Photo Gallery-Image Gallery Cross-Site Request Forgery (1.0.6)

WordPress Plugin miniOrange's Google Authenticator-WordPress Two Factor Authentication (2FA, MFA, OTP SMS and Email)-Passwordless login Cross-Site Scripting (5.4.39)

WordPress Plugin WordPress Payments-GetPaid Cross-Site Scripting (2.3.3)

WordPress Plugin Music Store Unspecified Vulnerability (1.0.20)

WordPress Plugin YITH Advanced Refund System for WooCommerce Security Bypass (1.0.10)

Severity

High

Classification

CVE-2012-5827 CWE-693 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

Tags

Missing Update