Description

Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2012-1612

Related Vulnerabilities

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1975)

MySQL CVE-2016-0648 Vulnerability (CVE-2016-0648)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (3.8.1)

Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-21673)

WordPress Plugin WP SEO Redirect 301 Cross-Site Request Forgery (2.3.1)

Severity

Medium

Classification

CVE-2012-1612 CWE-707

Tags

Missing Update Known Vulnerabilities