Unscored CVE-2012-1612 EUVD-2012-1623GHSA-xwwj-pfv7-hjcg

Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary we…

Published Sep 6, 2012 · Updated Sep 17, 2024 · Assigned by redhat

Description

Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

[oss-security] 20120403 Re: CVE-request: Joomla 2012-04 398-20120307 399-20120308 mailing-list
52859 vdb-entry
80880 vdb-entry
http://developer.joomla.org/security/news/399-20120308-core-xss-vulnerability.html
[oss-security] 20120403 CVE-request: Joomla 2012-04 398-20120307 399-20120308 mailing-list
48683 third-party-advisory