Description

Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to database output and the frontend administrative panel.

Remediation

References

CVE-2009-1938

Related Vulnerabilities

IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1476)

WordPress Plugin Magee Shortcodes Cross-Site Scripting (1.6.3)

Dolibarr CVE-2019-11200 Vulnerability (CVE-2019-11200)

WordPress Plugin Image Source Control Security Bypass (2.3.0)

WordPress Plugin Media Library Assistant SQL Injection (3.05)

Severity

Medium

Classification

CVE-2009-1938 CWE-707

Tags

Missing Update Known Vulnerabilities