Description
Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- 49678 third-party-advisory
- http://developer.joomla.org/security/news/539-20120901-core-xss-vulnerability
- [oss-security] 20121019 Re: CVE request: Joomla two XSS vulnerabilities fixed in 2.5.7 mailing-list
- joomla-unspecified-xss-cve20124531(79725) vdb-entry
- [oss-security] 20121007 CVE request: Joomla two XSS vulnerabilities fixed in 2.5.7 mailing-list
- http://www.joomla.org/announcements/release-news/5463-joomla-2-5-7-released.html