Description
In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component.
Unscored
CVE-2017-7987
EUVD-2017-16957GHSA-hjw7-2339-8v84
In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names leads to XSS vulnerabilities in the template …
Published Apr 25, 2017 · Updated Aug 5, 2024 · Assigned by mitre