Description
Cross-site scripting (XSS) vulnerability in Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the archive section.
References
- http://www.joomla.org/content/view/3831/1/
- 25508 vdb-entry
- 3108 third-party-advisory
- 20070903 Multiple vulnerabilities in Joomla 1.5 RC 1 mailing-list
- joomla-archive-xss(36425) vdb-entry
- 38416 vdb-entry