Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) com_admin component, (2) com_search component when "Gather Search Statistics" is enabled, and (3) the category view in the com_content component.

Remediation

References

CVE-2009-1279

Related Vulnerabilities

WordPress Plugin LifterLMS-WP LMS for eLearning, Online Courses, & Quizzes SQL Injection (7.6.2)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-45038)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.3.21)

PostgreSQL Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2026-18408)

Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-6414)

Severity

Low

Classification

CVE-2009-1279 CWE-707

Tags

Missing Update Known Vulnerabilities