Description

Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2012-1612

Related Vulnerabilities

ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-1850)

Drupal Core 8.x Multiple Vulnerabilities (8.0.0 - 8.1.9)

Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-14174)

WordPress Plugin Convert Plus Security Bypass (3.4.4)

Contao Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-29200)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-1612