Description

Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attackers to inject arbitrary web script or HTML via the Mod* cookie parameter to html/modules.php.

Remediation

References

CVE-2012-2413

Related Vulnerabilities

WebLogic CVE-2018-1257 Vulnerability (CVE-2018-1257)

WordPress Plugin Subscribe Sidebar by Blubrry Cross-Site Scripting (1.3.1)

Werkzeug WSGI Improper Handling of Windows Device Names Vulnerability (CVE-2026-27199)

SharePoint Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-49704)

WordPress Plugin TRADIES Information Disclosure (2.2.6)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-2413