Description

Cross-site scripting (XSS) vulnerability in the administrator panel in the com_users core component for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2009-1940

Related Vulnerabilities

MySQL CVE-2016-0661 Vulnerability (CVE-2016-0661)

WordPress Plugin MailPoet Newsletters (Previous) Security Bypass (2.8.1)

Jboss EAP Incorrect Authorization Vulnerability (CVE-2017-12196)

WordPress Plugin eCommerce Product Catalog for WordPress Cross-Site Request Forgery (3.0.17)

WordPress Plugin IzeeChat-Live Chat Cross-Site Scripting (1.0)

Severity

Medium

Classification

CVE-2009-1940 CWE-707

Tags

Missing Update Known Vulnerabilities